Search awesome repositories

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

Low code web framework for real world applications, in Python and Javascript

Open Cyber Threat Intelligence Platform

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Enterprise-ready zero-trust access platform built on WireGuard®.

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

A free & open modern, fast email client with user-friendly encryption and privacy features

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

Malicious traffic detection system

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/

A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.

Bandit is a tool designed to find common security issues in Python code.

🧱 Easy fast local-first microVM runtime and library

Free and open log management

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

A static analysis security vulnerability scanner for Ruby on Rails applications

The slightly more awesome standard unix password manager for teams

Securely and anonymously share files, host websites, and chat with friends using the Tor network

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

Tfsec is now part of Trivy

CTFs as you need them

Open device management

Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

BleachBit system cleaner for Windows and Linux