security

Laravel Ban simplify blocking and banning Eloquent models.

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

A fast production-ready static web server with TLS (HTTPS), routing, hot reloading, caching, templating, and security in a single-binary you can set up with zero code.

A VBA parser and emulation engine to analyze malicious macros.

A modular, stack-agnostic toolkit of security review skills for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.

vet is a command-line tool that acts as a safety net for the risky curl | bash pattern. It lets you inspect, diff against previous versions, and lint remote scripts before asking for your explicit approval to execute. Promoting a safer, more transparent way to handle remote code execution.

Creates Wireguard configuration for hub and peers with ease

A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity — autotriage, agent security, AI/ML supply chain, pentest agents, AI SAST, LLM-driven fuzzing, threat intelligence, SOC/SIEM triage, reverse engineering, LLM red-teaming, and more.

droast - a dockerfile linter that actually has opinions 🔥

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested up to iOS 11. The current version is writen in Swift and has the following vulnerabilities.

↕️🤫 Stealth redirector for your red team operation security

Protect against malicious open source packages 🤖

The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.

SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.

A Rust implementation of the Noise Protocol Framework

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

Curated list of resources for security Governance, Risk Management, Compliance and Audit professionals and enthusiasts (if they exist).

Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query

The successor to xp-AntiSpy, designed for the modern Windows experience

JSON Web Token Hack Toolkit

OpenClaw Security Vault — Atomic "claw" control: every AI reach, within your sight.

Automated pentest reporting with custom templates, project tracking, customer dashboard and client management tools. Streamline your security workflows effortlessly!

A manager for ssh-agent and gpg-agent, now in Python.

API聚合网关 An Aggregation API Gateway 大模型网关、API集成、API脱敏、API安全、API溯源、

Security Apps for Android

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

Agent-ready DevOps, security, infrastructure, and compliance knowledge base with 80+ skills across Kubernetes, Terraform, AWS/Azure/GCP, AI platform operations, container hardening, SOC2/ISO27001, and incident response—plus ready-to-run scripts, templates, and playbooks for SRE, platform, and security teams.

µTox the lightest and fluffiest Tox client

Scan MCP servers for potential threats & security findings.