security

Toolkit to emulate firmware and analyse it for security vulnerabilities

What's in your data? Extract schema, statistics and entities from datasets

Concrete: TFHE Compiler that converts python programs into FHE equivalent

A powerful tool for automated LLM fuzzing. It is designed to help developers and security researchers identify and mitigate potential jailbreaks in their LLM APIs.

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Repo for AI Agents The Definitive Guide

ChipWhisperer - the complete open-source toolchain for side-channel power analysis and glitching attacks

Manage secrets with Bash and GnuPG symmetric encryption

:vulcan_salute: Fast, modern, easy-to-use network scanner

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

GUAC aggregates software security metadata into a high fidelity graph database.

Occlum is a memory-safe, multi-process library OS for Intel SGX

If you have any good suggestions or comments during the search process, please feedback some index experience in issues. Thank you for your participation.查阅过程中，如果有什么好的意见或建议，请在Issues反馈，感谢您的参与。

A framework agnostic authentication & authorization system.

铜锁/Tongsuo is a Modern Cryptographic Primitives and Protocols Library

A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.

ICS/SCADA honeypot

A default credential scanner.

Attack surface mapping

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 19 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

Obtain GraphQL API schema even if the introspection is disabled

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

LibreSSL Portable itself. This includes the build scaffold and compatibility layer that builds portable LibreSSL from the OpenBSD source code. Pull requests or patches sent to tech@openbsd.org are welcome.

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

A curated list of awesome Ethereum security references

Secure Vault for Customer PII/PHI/PCI/KYC Records

Security risk analysis for Kubernetes resources