Search awesome repositories

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

Reverse proxies cheatsheet

An authentication system generator for Rails applications.

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

AI Native platform to get companies compliant - Vanta & Drata Alternative

Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

Secure Vault for Customer PII/PHI/PCI/KYC Records

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

🔐 Out of the box stateless openvpn-server docker image which starts in less than 2 seconds

LLM powered fuzzing via OSS-Fuzz.

An Active Defense and EDR software to empower Blue Teams

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

🍯 Unobtrusive and flexible spam protection for Rails apps

Bareos is a cross-network Open Source backup solution (licensed under AGPLv3) which preserves, archives, and recovers data from all major operating systems.

Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.

🔒 Enterprise-grade API gateway that helps you monitor and impose cost or rate limits per API key. Get fine-grained access control and monitoring per user, application, or environment. Supports OpenAI, Azure OpenAI, Anthropic, vLLM, and open-source LLMs.

Easily configure macOS security settings from the terminal.

A modular vulnerability scanner with automatic report generation capabilities.

Program to reverse Docker images into Dockerfiles

SSH-based "VPN for poors"

A Game of Hackers (CTF Scoreboard & Game Manager)