Search awesome repositories

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

DEPRECATED - MozDef: Mozilla Enterprise Defense Platform

A secure low code deception runtime framework, leveraging AI for System Virtualization.

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

Find web directories without bruteforce

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

AI Native platform to get companies compliant - Vanta & Drata Alternative

Reverse proxies cheatsheet

An authentication system generator for Rails applications.

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

Secure Vault for Customer PII/PHI/PCI/KYC Records

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

LLM powered fuzzing via OSS-Fuzz.

🔐 Out of the box stateless openvpn-server docker image which starts in less than 2 seconds

An Active Defense and EDR software to empower Blue Teams