Search awesome repositories

Automated System Hardening Framework

Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).

ClawKeeper: Comprehensive Safety Protection for OpenClaw Agents Through Skills, Plugins, and Watchers (aka The Norton for OpenClaw)

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

A security scanner for your LLM agentic workflows

:key: Hash type identifier (CLI & lib)

Privacy-first, end-to-end encrypted Mail, Pages, Drive, and Calendar.

A laboratory for learning secure web and mobile development in a practical manner.

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

Generate links that users can use to submit messages encrypted with your public key.

🔑 Free Offline-first Password Manager

Enterprise-oriented Generic Proxy Solutions

👩‍🏫 👨‍🏫 The open-source curriculum of Enki!

CodeGate: Security, Workspaces and Multiplexing for AI Agentic Frameworks

Damn Vulnerable NodeJS Application

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.

Tenzir is the data pipeline engine for security teams.

Security Bulletins that relate to Netflix Open Source

Kubernetes security notes and best practices

Every practical and proposed defense against prompt injection.

A binary and file access authorization system for macOS.

Rudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.

🔐 Secure, real-time monitoring dashboard for OpenClaw AI agents. Auth, TOTP MFA, cost tracking, live feed, memory browser and more.

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.

Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend

Caddy module to block or manipulate requests originating from AIs or cloud services trying to train on your websites

LinOTP - the open source solution for two factor authentication

Fast HTTP enumerator

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.