An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/rafaelzucon/linuxadm

Tarefas administrativas e de segurança do so Linux

antivirus bash clamscan data-analytics freshclam security

Last synced: 16 May 2026

https://github.com/rrhausen/powershell

This is all about powershell Scipts

powershell security

Last synced: 13 Feb 2026

https://github.com/timessless01/scam-detector-browser-extension

A browser extension that detects phishing sites, scams, and fraud in real-time using Google Safe Browsing. No data collection. Open-source and privacy-focused.

chrome-extension open-source phishing-detection privacy security

Last synced: 19 May 2026

https://github.com/jamesponddotco/credential-go

[READ-ONLY] A simple interface for retrieving secrets from systemd's credential management system.

go golang security systemd systemd-credentials systemd-creds

Last synced: 26 Jun 2025

https://github.com/ero-hack/python-obfuscator

Description: A simple Python script to obfuscate your code using base64 encoding.

encryption hacking-tool obfuscator python security source-protection tool

Last synced: 10 Jul 2025

https://github.com/drylikov/secrets.clj

A library designed to generate cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets.

authentication choice clj clojure cryptography drng jvm password prng random rng secrets secure security timestamp token uuid xkcd

Last synced: 21 May 2026

https://github.com/copyleftdev/torii

🎌 TORII (鳥居) - The Ultimate Git Control Plane. Policy-driven governance for Git at scale. Zero-trust enforcement, multi-tenancy, and comprehensive audit trails. Built in Rust.

audit compliance control-plane devops git git-hooks governance multi-tenancy policy-engine postgresql rust security sqlite ssh-authentication zero-trust

Last synced: 10 Apr 2026

https://github.com/mcwertgaming/openfoxblog

OpenFoxBlog - a blog about opensource and security

blog linux opensource security software-development

Last synced: 04 Mar 2025

https://github.com/narukoshin/yako

Password manager that works on my rules.

cryptography enryption go golang password-manager privacy security

Last synced: 11 Jun 2026

https://github.com/alvarofdezr/cript

Cryptographic Ratcheting Implementation Protocol - Secure group messaging with forward secrecy

cryptography ecdsa forward-secrecy group-messaging hkdf protocol-implementation python security sender-keys-protocol signature-ratcheting

Last synced: 06 Jul 2026

https://github.com/capiscio/capiscio-mcp-python

CapiscIO MCP Guard - Secure your MCP tools with agent-to-server authentication, authorization, and audit logging

a2a agent-to-agent ai-agents audit-logging authentication authorization llm mcp model-context-protocol python security trust

Last synced: 17 Feb 2026

https://github.com/erik-castro/vaultine

🔐 Multi-tenant cryptographic secrets management library for POSIX systems. Per-user KEK isolation, AES-GCM-256 encryption, automatic 90-day key rotation, and atomic operations. Includes CLI, TUI, and Python bindings. MIT licensed · v0.2.0-beta.

cpp cryptography edge-computing embedded encryption key-management multi-tenant posix secrets-management security sqlite

Last synced: 25 Jun 2026

https://github.com/danielcharrua/secure-encrypted-form

WordPress plugin to send encrypted messages using your PGP public key.

encryption pgp privacy security wordpress wordpress-plugin

Last synced: 16 Jan 2026

https://github.com/davescott99/spring-security-jwt

Autenticação e autorização com Spring Security e JWT

java jwt security sringboot

Last synced: 11 Oct 2025

https://github.com/fjmerc/safeshare

Secure temporary file sharing service with encryption, authentication, and automatic expiration

authentication chunked-uploads docker docker-image encryption file-sharing file-transfer file-upload go golang http2 pwa rate-limiting reverse-proxy security self-hosted single-binary sqlite

Last synced: 06 Mar 2026

https://github.com/global-vmware/vcd_nsxt_ip_set

This Repository contains the "vcd_nsxt_ip_set" Terraform Module. You can use this Module to deploy NSX-T IP Sets into a VMware Cloud Director (VCD) Environment.

firewall-rules infrastructure-as-code networking security terraform terraform-module vmware vmware-nsx

Last synced: 27 Mar 2025

https://github.com/global-vmware/vcd_nsxt_firewall

This Repository contains the "vcd_nsxt_firewall" Terraform Module. You can use this Module to deploy Edge Gateway Firewall Rules into a VMware Cloud Director (VCD) Environment.

firewall infrastructure-as-code security security-automation terraform terraform-module vmware vmware-nsx

Last synced: 27 Mar 2025

https://github.com/global-vmware/vcd_security_tag

This Repository contains the "vcd_security_tag" Terraform Module. You can use this Module to deploy Security Tags into a VMware Cloud Director (VCD) Environment.

infrastructure-as-code security terraform terraform-module vm vmware

Last synced: 27 Mar 2025

https://github.com/nisanth2004/ai-bot-using-springboot

Custom GPT named as Nisa Gpt were developed using springboot and react

ai gemini java prompt reactjs request response role security springboot user

Last synced: 18 Apr 2026

https://github.com/deploymenttheory/go-sdk-vtpm2

A pure Go software TPM 2.0 (vTPM) implementation. Including features such as measured boot, BitLocker sealing & attestation for Windows 11 guests under QEMU, built from the TCG spec.

attestation bitlocker emulator go golang measured-boot qemu security swtpm tcg tpm tpm2 trusted-computing virtualization vtpm windows-11

Last synced: 06 Jul 2026

https://github.com/amafjarkasi/hsx-context-hygiene-engine

Context hygiene & risk adjudication for LLM pipelines: secrets, PII, prompt-injection, policy redaction & tokenization.

cli compliance content-safety context-hygiene data-sanitization llm llm-security nodejs pii-redaction policy-engine prompt-injection redaction secret-scanning security tokenization typescript

Last synced: 15 Feb 2026

https://github.com/umutcamliyurt/anonchat

An anonymous and amnesic web chat server

anonymity opsec privacy rust-lang security security-tools

Last synced: 03 Apr 2025

https://github.com/crazystylus/wi-is-up

Workload Identity Race avoiding using Rust Hyper

docker-image gke hyper rust security workload-identity

Last synced: 20 May 2026

https://github.com/fialkaapp/fialka-mailbox

📬 Self-hosted store-and-forward relay for Fialka over Tor. AES-256-GCM, zero server-side decryption, no metadata, Raspberry Pi ready.

aes-256-gcm cryptography e2e-encryption end-to-end-encryption kotlin mailbox messenger onion-service post-quantum privacy raspberry-pi relay security self-hosted server store-and-forward tor zero-metadata

Last synced: 08 Apr 2026

https://github.com/jwilk/docbook-xsl-mitm

proof-of-concept mitmproxy script to infect DocBook XSL stylesheets

security

Last synced: 20 Mar 2025

https://github.com/suraj-khot-19/food-delivery-app

Food Delivery App - 1.Backend using Firebase/Firestore. 2.Frontend using Flutter/Dart

authentication flutter food-delivery-application security ui-design

Last synced: 30 Apr 2026

https://github.com/cojen/boxtin

Boxtin is a Java security manager agent.

java security

Last synced: 18 Oct 2025

https://github.com/marcosalanya19/transport_back_elp

La Gestión de Pasajes es una aplicación diseñada para facilitar la administración de pasajes en transporte público, permitiendo la reserva, compra de manera eficiente.

java security spring-boot swagger university

Last synced: 17 Apr 2026

https://github.com/signalcoding/signal-sentinel-scanner

MCP & Agent Skill Security Scanner - OWASP Agentic AI Top 10 + MCP Top 10 Compliant. 21 security rules scanning MCP server configurations and SKILL.md packages for vulnerabilities.

agent-skills agentic-ai ai-agents cli dotnet mcp owasp scanner security skill-scanning websocket

Last synced: 10 Apr 2026

https://github.com/pramath98/react-login-module

React based login module with encryption-decryption while sending login JSON to server with JWT authentication.

authentication authorization cryptojs encryption-decryption jwt jwt-authentication login login-forms login-page login-screen login-system react reactjs security

Last synced: 29 Mar 2025

https://github.com/XiaomingX/ysoserial-plus

ysoserial 最早在 AppSecCali 2015 演讲 "Marshalling Pickles: how deserializing objects will ruin your day" 中发布,包含适用于 Apache Commons Collections (3.x 和 4.x)、Spring Beans/Core (4.x) 和 Groovy (2.3.x) 的 gadget 链。后续版本增加了对 JRE <= 1.7u21 和其他常见 Java 库的支持。

exploit java security

Last synced: 04 Nov 2025

https://github.com/allnulled/express-boilerplate

Código fuente base para servidores basados en Node.js + Express + SQLite.

automatic backend boilerplate decorators express mysql rest rest-api security sequelize server sql sqlite user-interface

Last synced: 05 Apr 2026

https://github.com/goutamhegde002/iot-projects

An overview of various IoT-based projects focusing on innovative solutions to real-world problems. Projects include smart systems for agriculture, traffic management, waste management, health monitoring, and more.

arduino electronics electronics-engineering health-monitoring iot iot-automation security smart-home smart-parking traffic-management waste-management

Last synced: 02 Jan 2026

https://github.com/falcotorino/avast-antivirus

Experience comprehensive free Avast Antivirus protection for Windows�includes the full version with real-time malware detection, ransomware protection, Wi-Fi security scans, and secure password management. Download today for total PC safety.

anti-virus antivirus av avast avg defender eset free hack kaspersky malware malwarebytes security software windows

Last synced: 02 Jul 2026

https://github.com/ndx-technologies/fb-infer-docker

Docker image for facebook infer

docker image security static-analysis

Last synced: 20 Mar 2025

https://github.com/authress/authress-sdk.go

The Authress SDK for Go provides authorization as a service with fully compatible REST apis.

api authentication authentication-middleware authorization authorization-framework authorization-server credentials keys security user-identity user-management

Last synced: 21 Jul 2025

https://github.com/volkansah/php-pdo-micro-cms

PHP PDO - Micro CMS (Boilerplate) A Basic Content Management System (CMS) with PHP PDO and MySQL

micro micro-cms microcms pdo pdo-mysql pdo-php php php-pdo php-pdo-mysql security

Last synced: 05 Apr 2025

https://github.com/glueckkanja/.github

Default Community Information Files for the glueckkanja organization on GitHub

azure defender entra graph intune microsoft security sentinel

Last synced: 05 Apr 2025

https://github.com/c6zks4gssn-droid/mcp-guard

MCP gateway — auth, rate limits, spend caps. pip install bonanza-mcp-guard

ai-agents claude cursor mcp model-context-protocol python security

Last synced: 06 Jul 2026

https://github.com/meltingscales/itms-428

ITMS 428, Database Security at IIT.

mysql python security

Last synced: 20 Mar 2025

https://github.com/adamalston/Meltdown-Spectre

Meltdown & Spectre - catastrophic vulnerabilities - exploited 🛡️

cve meltdown meltdown-demo security spectre spectre-demo vulnerability

Last synced: 10 Mar 2025

https://github.com/crbroughton/recul

Recul, lag your npm dependencies, reduce supply chain risk

dependencies npm pnpm security supply-chain supply-chain-security version-pinning

Last synced: 06 Apr 2026

https://github.com/tokimoa/guard-proxy

Supply chain security proxy for npm, PyPI, and RubyGems — blocks malicious packages before they execute

llm malware-detection npm ollama proxy pypi python rubygems security security-tools supply-chain

Last synced: 06 Apr 2026

https://github.com/lyafence/chur

Universal Multi-Cloud & Bare-Metal Zero-Trust Secret Injector for Kubernetes.

golang k8s kubernetes security

Last synced: 30 Jun 2026

https://github.com/andygol/check-leaks

This script helps you prevent sensitive data from being leaked

leaked-secrets leaks prevention secret secret-management security

Last synced: 13 Apr 2025

https://github.com/solomonkassa/jedan_auth

Jedan-Auth 🔐 authentication library built with security-first principles, offering a comprehensive suite of authentication methods, enterprise-grade security features, and exceptional developer experience.

0auth auth authentication authorization django jwt openid-connect python security two-factor-authentication

Last synced: 03 Apr 2026

https://github.com/log-bell/avakill

🔪 Open-source safety firewall for AI agents. Intercepts tool calls before they execute, enforces YAML policies, and kills dangerous operations in real-time. Works with OpenAI, Anthropic, LangChain, and MCP. She doesn't guard. She kills.

ai-agents ai-safety anthropic claude-code compliance cursor devtools firewall guardrails langchain llm mcp model-context-protocol openai policy-engine prompt-injection python sandbox security tool-use

Last synced: 08 Mar 2026

https://github.com/jaywcjlove/keyzer

Keyzer is a native app designed to securely store all your passwords and other private information.

app application desktop-app desktop-application encryption jaywcjlove keyzer macos macos-app macos-application offline-app password password-manager passwords secure security swift swiftui

Last synced: 06 May 2026

https://github.com/mecha-cms/x.comment.guard.link

Disables comment author links and limits the number of links in a comment.

comment extension filter guard limit link remove security

Last synced: 18 May 2026

https://github.com/muhamed-hassan/one_system_security_poc

Securing the system from its frontend-channels using LOGIN FORM which have username/password with support of another internal system for users-administration purposes 😏 🤔 💪 🤨 🎉 🚦 ⏳ 🛡 💯

authentication authorization backend black-ops fucken-private-sector-leaks global-counter-terrorism global-terrorism-of-corrupted-investors-tribes java jwt security spring-boot

Last synced: 07 Jul 2025

https://github.com/wezylnia/toolgate

Policy, approval, redaction, timeout, and audit middleware for MCP server tools.

audit-logging mcp middleware model-context-protocol npm-package redaction security typescript

Last synced: 29 Jun 2026

https://github.com/project-navi/navi-bootstrap

A repo that bootstraps repos. Spec-driven Jinja2 engine + 7 template packs for production-grade CI, security, and release pipelines.

bootstrapping ci-cd code-review devops jinja2 python security template-engine

Last synced: 03 Mar 2026

https://github.com/uptudev/passwerdle

A game based on guessing one of the top 500 most used passwords.

cli cli-game game password security wordle wordle-clone

Last synced: 03 Mar 2026

https://github.com/goafabric/callee-service-quarkus

⚛️Very tiny QUARKUS Service without Persistence - Also includes a native image build

aspect native oidc openapi prometheus quarkus rest-api security

Last synced: 04 Mar 2026

https://github.com/sayan9168/sayan-sec-tool

🔬 Advanced Web Security Research Tool for Educational Purposes | Python-based Burp Suite Alternative | CEH Learning Project | Features: Proxy, Scanner, Repeater, XSS/SQLi Detector

ceh education ethical-hacking pentesting python security security-tools web-security

Last synced: 02 Jun 2026

https://github.com/allsmog/kuzushi-security-plugin

Autonomous, language-aware security pipeline for Claude Code: builds repo context, then x-ray → PASTA threat model → CVE threat-intel → invariant testing & adversarial threat-hunting. Wires conditional LSP/MCP tooling (tree-sitter, semgrep, CodeQL, Joern); promotes findings to a shared index. Self-contained, no external engine.

claude-code claude-code-plugin codeql devsecops joern sast security semgrep static-analysis threat-intelligence threat-modeling tree-sitter

Last synced: 03 Jun 2026

https://github.com/praetoriansentry/diceware

Really simple diceware passphrase genator

c password-generator security

Last synced: 31 Mar 2026

https://github.com/krisarmstrong/password-combo-generator

Generate case combinations and permutations of passwords for security testing.

password python security utilities

Last synced: 04 Mar 2026

https://github.com/fenixvd/crowdsec-mikrotik-bouncer

Bounce CrowdSec decisions onto a MikroTik router — ban scanners & web attackers at the WAN edge via address-list (local + community + Traefik web detect)

bouncer crowdsec fail2ban homelab librouteros mikrotik routeros security self-hosted

Last synced: 21 Jul 2026

https://github.com/varev-dev/publication-system-api

RESTful service designed for a digital publishing platform, serving as a real-world example of applying RBAC & ABAC in action.

access-control restful-api security

Last synced: 04 Mar 2026

https://github.com/freight-trust/security

Security, Bugs and Reporting Information

bug-bounty bug-program bugs devops disclosures infosec operations risk security

Last synced: 04 Mar 2026

https://github.com/dryvist/ansible-splunk

Ansible role for deploying and configuring Splunk Enterprise - includes HEC input, indexes, apps, and multi-disk storage with Doppler secrets integration

ansible automation devops enterprise infrastructure-as-code log-management logging monitoring observability security siem splunk

Last synced: 20 Jul 2026

https://github.com/usbshield/usbshield

USBShield protects your Windows from unauthorized USB devices

security usb windows

Last synced: 01 Apr 2026

https://github.com/moltblock/moltblock

Framework for evolving composite AI entities. Multi-agent graphs, verification, memory, and governance — molting, not chaining. OpenClaw-ready.

ai ai-agents ai-safety composite-intelligence governance llm multi-agent nodejs openclaw security trust typescript verification

Last synced: 01 Apr 2026

https://github.com/busybee3333/cors-audit

Scan any domain for CORS misconfigurations. Get copy-paste fix configs for 22 platforms. Zero dependencies.

cli cors cors-audit devtools nodejs penetration-testing security web-security

Last synced: 16 Apr 2026

https://github.com/lis-zt/scp-plugin-security-wp

All in one plugin security for ur wordpress, block link, deactive comment, deactive xmlrpc, custom admin login url, scan malware ur website.

calv-indo plugin scp security wordpress

Last synced: 16 Apr 2026

https://github.com/pfischer1687/netwatcher-cli

NetWatcher CLI is a lightweight network connection monitoring tool written in Python. It helps you track active outbound connections on your system, monitor associated processes, and provides geolocation information for remote IP addresses.

cli monitoring network security typer

Last synced: 05 Mar 2026

https://github.com/marcelositr/vaultar

Vaultar – Backup seguro e criptografado com logs, restore confiável e suporte a múltiplos arquivos/pastas.

automation backup cli compressor encryption gpg python security

Last synced: 16 Apr 2026

https://github.com/aihxp/sumac

Sumac: bring out what your tools can do — one Rust binary to bridge skills, MCP, and APIs. Run any skill as an MCP server, any MCP server as a CLI, and any API from your terminal.

ai api-client automation cli developer-tools graphql mcp mcp-server model-context-protocol openapi rust security skills

Last synced: 08 Apr 2026

https://github.com/mendel5/email

Information about how to configure email servers, services, etc.

configuration configure dane dkim dmarc dnssec e-mail email information mail outlook security spam spf

Last synced: 05 Mar 2026

https://github.com/sidrat2612/agent-policykit

For teams using multiple AI coding agents: detect the repo stack, generate Copilot, Claude, Cursor, Codex, Aider, and Gemini instruction files from one policy, and update them safely.

ai aider claude-code cli codex coding-agents copilot cursor gemini governance instructions policy security

Last synced: 03 Jun 2026

https://github.com/jimpresting/macos-open-external-apps

Allow external/unsigned apps to run on macOS by disabling Gatekeeper. Fix "can't be opened from unidentified developer" errors.

blocked-apps developer-tools external-apps gatekeeper macos macos-fix macos-sequoia security spctl system-settings terminal unsigned-apps

Last synced: 25 Apr 2026

https://github.com/omnipotence-eth/godspeed-coding-agent

Security-first open-source coding agent with 4-tier permissions, hash-chained audit trails, and 200+ LLM provider support

ai audit-trail cli coding-agent developer-tools litellm llm ollama open-source security

Last synced: 17 Apr 2026

https://github.com/penguintechinc/skauswatch

Cloud security platform: S3 malware scanning (ClamAV/YARA) with threat intelligence enrichment, vulnerability detection, EDR endpoint monitoring, enterprise secrets management with JIT access (IceBox), and AI-powered code review integration (Darwin).

ai appsec behavior code-review edr enterprise monitoring scanner secrets-management security siem static-analysis threat-intelligence

Last synced: 01 Apr 2026

https://github.com/ilxnah/devops-case-study

Dev(Sec)Ops Case Study: Insights on Kubernetes, GitOps, monitoring, security & networking. | Případová studie pro Dev(Sec)Ops: Poznatky o Kubernetes, GitOps, monitoringu, bezpečnosti a síťování.

automation case-study ci-cd container-orchestration devops docker gitops grafana infrastructure-as-code interview-prep kubernetes kubernetes-cluster load-balancing log-aggregation monitoring networking prometheus rbac security ssl-tls

Last synced: 17 Apr 2026

https://github.com/serein-213/yin-shield

🛡️ YinShield (隐): The zero-config, local-first privacy layer for AI APIs. 让你的数据对 AI 隐形。

ai-safety chinese-nlp de-identification deepseek llm openai pii-detection privacy security zero-config

Last synced: 05 Mar 2026

https://github.com/7a6163/gem-audit

Ultra-fast, standalone security auditor for Gemfile.lock — written in Rust

audit bundler cli cve gemfile ruby ruby-on-rails rust security security-tools vulnerability-scanner

Last synced: 01 Apr 2026

https://github.com/gebalamariusz/cloud-audit

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

audit aws cli cloud-security compliance devops python security

Last synced: 05 Mar 2026

https://github.com/b-macker/naab-passage

🔒 Sovereign data gateway & PII protection - Zero leakage to LLMs and APIs with self-synthesizing architecture. HIPAA/GDPR compliant. Part of the NAAb Ecosystem.

anthropic api-gateway audit compliance data-privacy data-protection encryption gateway gdpr hipaa llm-proxy naab naab-ecosystem openai pii-protection polyglot privacy security soc2 zero-trust

Last synced: 06 Mar 2026

https://github.com/piti/openclaw-security-dashboard

Open-source security dashboard for OpenClaw deployments. Scans gateway exposure, malicious skills, config hardening, identity integrity, and more.

dashboard ioc open-source openclaw security threat-intelligence

Last synced: 06 Mar 2026

https://github.com/bogdanticu88/mcp-map

Static attack surface analyzer for MCP servers and LLM tool definitions

cli devsecops llm mcp mitre-atlas model-context-protocol owasp python security static-analysis

Last synced: 03 Jun 2026

https://github.com/bogdanticu88/acerta

EU vendor security due diligence platform. CIA-based risk tiering, adaptive DDQ across 12 domains, and OSINT vetting for high-risk vendors. Aligned to GDPR, NIS2, and DORA.

dora due-diligence eu-compliance gdpr nextjs nis2 security typescript vendor-risk

Last synced: 03 Jun 2026

https://github.com/joscha/mta-sts-cloudflare

A Cloudflare worker for mta-sts policy files

cloudflare email mta-sts security

Last synced: 17 Apr 2026

https://github.com/uysct/pyload-ft-public-full

Fast and secure Python download manager - hardened pyLoad-ft derivative

docker download-manager hardening pyload pyload-ft python security

Last synced: 02 Apr 2026

https://github.com/soyvural/kubectl-ro

Read-only Kubernetes access for AI agents and humans. kubectl wrapper + MCP server that blocks mutations and redacts secrets.

ai-agents cloud-native devops krew kubectl kubectl-plugin kubernetes llm mcp mcp-server read-only security

Last synced: 02 Apr 2026

https://github.com/fadouse/javarat

A shit code base Java Remote Access Trojans (RATs) Framework.

framework remote-access-trojan security

Last synced: 17 Apr 2026