An open API service indexing awesome lists of open source software.

Security

Cybersecurity (security) includes controlling physical access to hardware as well as protection from attacks that come via network access, data injection, and code injection.

https://github.com/pforret/wpharden

Harden your Wordpress installation (bash script)

bash bash-script bashew hardening security security-tools wordpress

Last synced: 08 May 2026

https://github.com/jasondrawdy/autoarchiver

An advanced and flexible auto-archiving tool that allows the archiving of both individual files and entire directories using set intervals.

application archiving automation backup cryptography dotnet encoding security utilities windows

Last synced: 08 May 2026

https://github.com/jnm2/threshold

Paper backup requiring a chosen K of N pieces to decrypt. Useful for storing passwords, private keys for PGP or Bitcoin, recovery codes, secret instructions, and small files. Work in progress.

backup bitcoin cross-platform cryptography csharp digital dotnet-core encrypt paper password pgp print private-key redundancy secret-sharing security shamir threshold wallet

Last synced: 10 May 2026

https://github.com/sqreen/devise_sqreener_tutorial

A tutorial for helping filter potentially malicious users from signing up for your Rails app.

devise rails security sqreen tutorial

Last synced: 12 May 2026

https://github.com/aviggiano/fluffy-waddle

Zero-config smart contract vulnerability detection system. This is a project inspired by library.dedaub.com/decompile and it should ONLY be used for research purposes.

security smart-contracts solidity

Last synced: 12 May 2026

https://github.com/destan0098/xssscanner

this tool scan XSS (Cros site scripting ) and show if website vulnerability

security security-tools vulnerability-scanners

Last synced: 14 May 2026

https://github.com/balangyaoejuspher/rastray

Blazing-fast static analysis CLI for security, dependency, and performance audits.

cli dependencies-audit linter miettte rust security static-analysis

Last synced: 18 Jun 2026

https://github.com/yasindce1998/barzakh

A controlled, white-hat UEFI bootkit simulation environment for academic research and defensive detection engineering.

bootkit c defensive-security kernel kernel-module malware offensive-security python rootkit security uefi uefi-boot uefi-development

Last synced: 21 Jun 2026

https://github.com/quenchworks/charts

Clean-room Helm charts for the QuenchWorks catalog: each pinned to a signed, 0-CVE image digest, published as OCI to GHCR and listed on ArtifactHub.

artifacthub cosign devsecops digest-pinned hardened helm helm-charts k8s kubernetes oci security sigstore

Last synced: 22 Jun 2026

https://github.com/c0nw0nk/javascript-block-proxy

Simple method to block proxies using javascript

blocking html javascript proxies proxy security

Last synced: 24 Jun 2026

https://github.com/peterfritz/spg

A cryptographically secure password generator.

csprng nextjs password pwa security

Last synced: 28 Apr 2026

https://github.com/hatmahat/go-rbac

Lightweight, framework-agnostic RBAC package for Go with context injection, in-memory caching, and GORM support.

authorization chi echo fiber gin golang middleware rbac security

Last synced: 21 Apr 2026

https://github.com/kadras-io/package-for-cert-manager

Kubernetes-native package for cert-manager, a cloud-native solution to automatically provision and manage X.509 certificates.

carvel cert-manager certificate-management kadras kapp-controller kubernetes security tls

Last synced: 01 Feb 2026

https://github.com/elastic/example-mcp-app-security

Reference MCP App for Elastic Security โ€” interactive SOC dashboards inside Claude, Cursor, and other MCP hosts.

ai claude cursor elastic mcp model-context-protocol security soc

Last synced: 24 Apr 2026

https://github.com/m-ah07/linux-security-dashboard

A Flask-based interactive dashboard for monitoring Linux system security. It provides real-time insights into system information, open ports, running processes, and failed login attempts. The dashboard is designed to enhance system monitoring with Basic Auth protection, Slack notifications, and Docker support for seamless deployment.

audit cve dashboard docker flask linux monitoring open-ports open-source security slack-alerts system-info

Last synced: 15 Apr 2026

https://github.com/hashgraph-online/codex-plugin-scanner

Security and best-practices scanner for Codex CLI plugins. Scores plugins 0-100.

cli codex codex-plugins mcp plugin-scanner python scanner security

Last synced: 06 Apr 2026

https://github.com/oritwoen/vusi

ECDSA signature vulnerability analysis library and CLI

bitcoin cryptography ecdsa nonce-reuse private-key-recovery rust security vulnerability-detection

Last synced: 01 Feb 2026

https://github.com/bencoverts/webtools

Web Tools, Information Gathering, CMS Detection

domain gatering hack hacking information security security-tools tools web website webtools

Last synced: 05 Jun 2026

https://github.com/holzhaus/ghastly

A security-focused linter for Github Actions Workflows, written in Rust ๐Ÿฆ€.

ci command-line-interface github-actions linter rust security workflow yaml

Last synced: 04 May 2026

https://github.com/blackvoidx/google-dorker

Simple Google Dork Generator for Cybersecurity

bug-bounty bugbounty cybersecurity dork dorker google-dorks googledork osint security

Last synced: 04 Mar 2026

https://github.com/opticsquid/bellatrix

A prebuilt Express JS Authentication & Authorization Project based on a REST API interface. It has the basic authentication and Authorization routes with the latest security measures implemented so that your application is much more secure from day 1. You are welcome to build upon and extend this project as and when required.

authentication authorization express expressjs gdsc-tmsl hacktoberfest jwt jwt-authentication node nodejs openapi3 rest-api security

Last synced: 15 Apr 2026

https://github.com/borapolat/logseeker

Windows Event Viewer Security Log - Filtering Application for Deleted and Moved/Renamed Files

deleted-files enterprise-software event-viewer it-professional log-analyzer log-filtering security system-administration-tools windows

Last synced: 14 Feb 2026

https://github.com/phpmv/ubiquity-security

Security module for Ubiquity framework

php security ubiquity ubiquity-framework

Last synced: 09 Jun 2026

https://github.com/goklab/guardvibe

Security MCP for vibe coding. 429 rules, 36 tools, CLI + doctor. Host security, auth coverage mapping, LLM-powered deep scan (IDOR/business logic), taint analysis, and CVE/supply-chain IOC detection for Next.js, Supabase, Clerk, Stripe, Prisma, Drizzle, Hono, GraphQL, AI SDK, MCP, and the AI-native stack.

ai-security claude clerk cursor cve drizzle hono mcp mcp-server nextjs owasp prisma prompt-injection sast security stripe supabase typescript vercel vibe-coding

Last synced: 07 Jun 2026

https://github.com/3tternp/xamppsec

this is an automated script to secure xampp server in one level linux based specially debian and ubuntu based

bash-script linux security security-hardening xampp

Last synced: 04 May 2026

https://github.com/huntlabs/hunt-security

A security library for hunt.

dlang hunt security ssl tls

Last synced: 04 Mar 2026

https://github.com/js-kyle/koa-security.txt

Koa middleware for serving a security.txt file

koa koa-middleware security securitytxt

Last synced: 19 Jan 2026

https://github.com/andy-maier/easy-server

Secure server access that is easy to use

access ansible python security server service vault

Last synced: 19 Jun 2026

https://github.com/aaron3312/proyectodronunity

๐ŸšSecurity multi-agent system simulating prison surveillance with autonomous drones, cameras & guards. Features real-time monitoring, threat detection & automated response capabilities.

alerts cameras detection drones flask modeling monitoring multiagent patrolling python security simulation surveillance tc2008b unity yolov5 yolov8

Last synced: 13 Feb 2026

https://github.com/rohansx/vibeguard

Security Property Graph (SPG) oracle for AI coding agents.

ai-agents claude-code cursor devsecops golang mcp security static-analysis taint-analysis

Last synced: 03 Apr 2026

https://github.com/astropilot/bigeye

A web security challenges website, a school project for my software security course

challenge cryptography ctf-platform security web

Last synced: 19 Mar 2026

https://github.com/abhinandan-khurana/gitstarrecall

GitStarRecall is a local-first AI enabled web app that turns your GitHub stars into a searchable memory system on your browser locally.

ai ai-search developer-tools github-stars llm local-first local-first-ai memory ollama privacy privacy-focused rag recall security semantic-search starred-repositories vector-search webgpu webllm

Last synced: 04 Mar 2026

https://github.com/happycod3r/term-lock

Term-Lock is a simple pin system that allows you to block access and add a layer of security to your terminal.

bash bashrc extension oh-my-zsh-custom ohmyzsh omz omz-plugin security shell-extension shellscript term-lock terminal-security v1 zsh zshrc

Last synced: 17 Apr 2026

https://github.com/bounded-systems/prx

The agent-run work-unit CLI: capability-scoped agents whose every privileged effect is verified against its signed owner, driving a work unit through one signed pipeline to a merged PR.

agent-infra agents ai-agent ai-agents anthropic capability-security claude claude-code cli llm mcp security

Last synced: 04 Jul 2026

https://github.com/cpscript/linux-security

A simple Linux security script to protect your files and data from external brute force attempts if you get caught and your device gets seized

linux security

Last synced: 12 Mar 2025

https://github.com/konstantinullrich/openvas2defectdojo

OpenVAS2DefectDojo exports all new OpenVAS Reports from one or multiple OpenVAS instances to the local system.

defect-dojo openvas-reports python3 security

Last synced: 06 Jun 2026

https://github.com/ryvos/ryvos

Open-source autonomous AI assistant with 5-tier security, 62 tools, 14 LLM providers. Written in Rust. Single binary.

ai ai-agent ai-assistant assistant autonomous autonomous-agent chatbot cli discord-bot docker llm mcp ollama open-source rust security self-hosted telegram-bot

Last synced: 02 Apr 2026

https://github.com/ruedigervoigt/bote

A Python library to send email. Enforces encryption if not sending via localhost.

email email-sender python-email python-library security smtp ssl tls

Last synced: 14 Jan 2026

https://github.com/lucadibello/tmux-fuzzing

Enhanced fuzzing for tmux using OSS-Fuzz. Includes custom `cmd-fuzzer` and `argument-fuzzer` harnesses for improved code coverage and a PoC for `CVE-2020-27347`

cve-2020-27347 exploit-development fuzzing oss-fuzz security software-security tmux vulnerability-analysis

Last synced: 31 Jan 2026

https://github.com/turbot/flowpipe-mod-ipstack

Ipstack pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect Ipstack to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations ipstack ipstack-api low-code orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 19 Mar 2026

https://github.com/wild0ni0n/txtra

txtra is a tool that profiles the cloud services used by an organization using the txt records returned by name resolution for the domain in question.

dns python security

Last synced: 14 Jan 2026

https://github.com/mscbuild/website-security

๐Ÿ›ก๏ธ๐Ÿ” Project SECURITY โ€“ Website Security, Anti-Spam & Firewall ๐Ÿ‘ฎ๐Ÿปโ€โ™‚๏ธ

antispam cms-framework firewall-configuration php security security-tools website

Last synced: 12 Oct 2025

https://github.com/hpgrahsl/flightswebapi

Sample Project for my Java Magazin (04/2017) Article together with Manfred Steyer

keycloak oauth2 oidc security spring-boot webapi

Last synced: 24 Apr 2026

https://github.com/ptondereau/ext-biscuit

WIP - a PHP extension for biscuit token implementation

biscuit extension php security

Last synced: 16 Apr 2026

https://github.com/turbot/flowpipe-mod-virustotal

VirusTotal pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect VirusTotal to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code orchestration pipelines security virustotal virustotal-api workflow workflow-automation workflow-engine

Last synced: 19 Mar 2026

https://github.com/dishine-digital-agency/cookie-audit

Most cookie consent setups are broken in ways nobody notices until an audit. This Puppeteer-powered CLI fires up a headless browser to capture, classify, and grade every cookie your site sets. Scan and get a categorized cookie inventory with GDPR compliance flags (470+ known cookies, automatic classification, multi-format reports).

automation compliance cookies developer-tools gdpr open-source privacy puppeteer python scanner security security-tools tracker-blocking web-scraping

Last synced: 25 Apr 2026

https://github.com/madret/kql-generator

KQL generator, for generating quick Hunting queries. Microsoft Defender XDR focussed.

dfe email endpoint generator hunting kql kusto language m365 mde query security

Last synced: 19 Mar 2026

https://github.com/armaan29-09-2005/ai-osint-security-analyzer

AI OSINT Security Analyzer is an intelligent platform that leverages AI to perform autonomous investigations across various intelligence sources. With features like multi-source integration and real-time threat intelligence, it ensures comprehensive security assessments. ๐Ÿ›ก๏ธ๐Ÿ”

ai ai-agent analysis cohere cve cve-analysis cybersecurity ip ip-address osint osint-tool osint-tools python security security-analysis shodan streamlit vulnerability-assessment

Last synced: 15 Apr 2026

https://github.com/realorangeone/django-management-auth

Login to a Django application from a management command

authentication django security

Last synced: 17 Apr 2026

https://github.com/axonops/mask

Fail-closed PII, PCI, and PHI masking for Go - 60+ built-in rules (email, PAN, SSN, IBAN, IMEI, and more), rune-aware UTF-8, zero runtime dependencies

compliance data-masking gdpr go golang hipaa masking observability pci-dss phi pii privacy pseudonymization redaction security

Last synced: 10 Jun 2026

https://github.com/anseki/gnirts-loader

gnirts loader module for webpack - Obfuscate string literals in JavaScript code.

literal loader mangle obfuscate obfuscation obfuscator password secret security string webpack

Last synced: 06 Feb 2026

https://github.com/krish-makadiya/password-generator

The Random Password Generator is a web tool that helps users create secure and random passwords using HTML, CSS and JavaScript..This tool allows users to generate a password of a specified length, with options to include uppercase letters, lowercase letters, numbers, and special characters.

copy-to-clipboard css customizable-length frontend html javascript lowercase numbers open-source password-generator password-security password-strength password-strength-indicator privacy random-password security special-characters uppercase user-friendly web-development

Last synced: 07 May 2026

https://github.com/thayeeb9211/ortho-secure

Orthosecure: Secure Dentistry Appointment Booking and Management System. It is designed to be robust and secure application with enhanced security and compliance checks within containerized environments. It leverages cutting-edge technologies to monitor, analyze, and secure workloads in real-time.

cicd csrf-attacks ddos-attacks devsecops docker-compose docker-image gitlab security xss-attacks xss-vulnerability

Last synced: 28 Feb 2026

https://github.com/derhansen/add_pwd_policy

Additional Password Policy validators for TYPO3 CMS 12.4+

password security

Last synced: 25 Apr 2026

https://github.com/emorilebo/redact-ai-stream

A lightweight Node.js library designed to secure your AI applications by automatically redacting Personally Identifiable Information (PII) from data streams before they reach public APIs (like OpenAI, Anthropic, etc.) and restoring the original data in the response stream.

ai godfreylebo llm pii privacy redaction security stream

Last synced: 27 Jan 2026

https://github.com/extensionengine/pipeline-security-orb

An orb to facilitate security work within Studion CircleCI pipelines

circleci orb security studion

Last synced: 12 Oct 2025

https://github.com/qeeqbox/security-controls

Countermeasures or safeguards for detecting, preventing, and mitigating cyber threats and attacks (Protect assets)

controls infosecsimplified qeeqbox security security-controls

Last synced: 19 Mar 2026

https://github.com/tom474/cryptography-comparative-analysis

[RMIT 2024C] COSC2539 - Security in Computing and IT - Analytical Security Report

asymmetric cryptography hashing security symmetric

Last synced: 07 May 2026

https://github.com/phpmv/ubiquity-acl

Access control lists for Ubiquity framework

php security ubiquity-framework

Last synced: 10 Jun 2026

https://github.com/shadawck/scabi

Implement vulnerabilities scanning on top of package management system like apt, pip, composer...

cve dependencies mitre ossindex package-manager python scanner security security-audit security-tools vulnerability

Last synced: 06 Jun 2026

https://github.com/kahoon/netmon

Linux network appliance monitor for DNS and Tailscale health, with change-driven notifications, tracing, and runtime stats.

dns linux network ntfy pihole security tailscale unbound

Last synced: 25 Apr 2026

https://github.com/01alekseev/psc

Petoron Seal Contracts (PSC) is a minimalistic cryptographic contract format. It doesn't execute. It verifies. Then it ends :))

binary crypto-contracts cryptography digital-signature minimal petoron psc security ttl

Last synced: 27 Jun 2026

https://github.com/fikriaf/sentrysol-langchain

Adaptive Web3 Security Intelligence Pipeline โ€ข Multi-Agent โ€ข LLM Scoring โ€ข Real-Time Wallet & Transaction Risk Profiling

ai-agents intelligence langchain security web3

Last synced: 19 Oct 2025

https://github.com/confy-security/confy-addons

Implementation of symmetric and asymmetric encryption with AES and RSA algorithms for client applications of the Confy communication system

aes base64 confy cryptography decryption encryption privacy rsa security

Last synced: 28 Jan 2026

https://github.com/koladilip/aws-checks

Reprots issues in your AWS account

aws best-practices rust-lang security

Last synced: 26 Apr 2026

https://github.com/onkar69483/home-security-system

Smart home security system built using a NodeMCU, an ultrasonic sensor (HC-SR04), an LED, and a buzzer. The system detects motion and alerts by lighting up the LED, sounding the buzzer, and sending notifications to Telegram.

esp8266 esp8266-projects home-security-system iot nodemcu-esp8266 safety security

Last synced: 08 May 2026

https://github.com/tracebit-com/tracebit-community-action

The Tracebit Community GitHub Action helps developers detect intrusions and supply-chain attacks across their GitHub workflows and pipelines by deploying canary credentials.

actions canaries deception security typescript

Last synced: 15 Apr 2026

https://github.com/simplito/privmx-endpoint-kotlin

Kotlin wrappers for the native C++ library used by PrivMX to handle end-to-end (e2e) encryption.

communication encryption end-to-end-encryption kotlin kotlin-android kotlin-ios kotlin-jvm kotlin-multiplatform-library mobile privmx security

Last synced: 07 Jun 2026

https://github.com/btafoya/gomailserver

Modern, composable all-in-one mail server in Go with SMTP, IMAP, CalDAV, CardDAV, DKIM, SPF, DMARC, antivirus, and anti-spam

caldav carddav dkim dmarc email email-server go golang imap mail-server mailserver security smtp spf sqlite tls

Last synced: 24 Jan 2026

https://github.com/antitree/bsidesroc2017ctf

Temporary repo for BSidesROC 2017 CTF challenges.

ctf security tor

Last synced: 18 Jan 2026

https://github.com/iamnapo/poor-mans-password-manager

๐Ÿ—๏ธ Simple CLI to turn memorable sentences into secure passwords

cli encryption manager password password-manager password-security secure-password security

Last synced: 05 Mar 2026

https://github.com/nisanth2004/springboot-3-jwt-authentication-authorization-part1

In the context of user authentication, JWTs are commonly used to authenticate users and provide them access to protected resources.

amingoscode api intellij-idea java jpa jparepository json jwt mysql oops rest role security securityfilterchain spring springboot3 token token-based-authentication

Last synced: 16 Apr 2026

https://github.com/jiprettycool/lunatransfer

๐Ÿ“‚ Self-hostable Managed File Transfer solution built with Go, featuring API keys, comprehensive audit logging, and real-time WebSocket notifications for secure file exchange.

api api-key audit-logging authentication file-management file-sharing file-transfer go golang jwt managed-file-transfer notifications rate-limiting rest-api secure-transfer security self-hosted websockets

Last synced: 11 Oct 2025

https://github.com/belgif/rest-security

The Belgif REST Security Guide is ought to be regarded as an addendum to the Belgif REST Guidelines.

belgif belgium guide rest rest-api restful-api security

Last synced: 20 Apr 2026

https://github.com/satvikx/project-usb

This is a software which enhances the physical security of the Computers and protects it from BadUSBs by blocking the USB ports (essentially by running batch scripts).)

batch-script gui python security tkinter usb

Last synced: 23 Jan 2026

https://github.com/xxmrk888ytxx/portal-android

Portal is a secure, open-source smart key that turns your Android smartphone into a wireless authentication tool for your computer. It enables instant PC unlocking via Bluetooth (RFCOMM) or WiFi (WebSockets), featuring biometric protection, Wake-on-LAN support, and a privacy-focused, local-only communication model.

android bluetooth kotlin mtls security windows

Last synced: 31 May 2026

https://github.com/wyre-technology/threatlocker-mcp

MCP server for ThreatLocker โ€” zero-trust application allowlisting, approval requests, audit logs

mcp mcp-server msp security threatlocker zero-trust

Last synced: 10 Jun 2026

https://github.com/cybardev/checkpass

Tool to check strength of passwords and passphrases

login password security

Last synced: 24 Jan 2026

https://github.com/adegans/no-bot-registration

Prevent bots from creating accounts on your WordPress or ClassicPress website by blacklisting domains and usernames and present people with a human friendly security question.

account-management accounts classicpress classicpress-plugin login-security php security spam-prevention spam-protection wordpress wordpress-plugin wordpress-security

Last synced: 27 Apr 2026

https://github.com/dradis/dradis-wpscan

WPScan plugin for the Dradis Framework

dradis dradis-framework infosec pentesting security wpscan

Last synced: 24 Jan 2026

https://github.com/turbot/flowpipe-mod-nvd

NVD pipeline library for the Flowpipe cloud scripting engine. Automation and workflows to connect NVD to the people, systems and data that matters.

automation cloud devops flowpipe flowpipe-mod hacktoberfest integrations low-code nist-nvd nvd orchestration pipelines security workflow workflow-automation workflow-engine

Last synced: 19 Mar 2026

https://github.com/alextanhongpin/node-security

Implementing a safer node-express server

express nodejs owasp security

Last synced: 09 May 2026

https://github.com/robgrame/intune-device-actions

Serverless self-service Intune device action API (wipe, autopilot-register, bitlocker). Azure Functions (.NET 10, capability-plugin architecture) + Service Bus + mTLS client cert + Microsoft Graph. Includes Bicep IaC and PowerShell 5.1 client.

azure azure-functions bicep device-management dotnet dotnet10 entra-id infrastructure-as-code intune managed-identity mdm microsoft-graph microsoft-intune mtls powershell security serverless storage-queue

Last synced: 07 Jun 2026

https://github.com/maclovin/llm

My personal repository with a bunch of resources from my studies on LLMs and prompt engineering in a few specific fields.

ai llm prompt-engineering security

Last synced: 13 Feb 2026