security

:vertical_traffic_light:Web Application Firewall or API Gateway(应用防火墙/API网关)

Ansible role for installing WireGuard VPN. Supports Ubuntu, Debian, Archlinx, Fedora, openSUSE Leap and some Redhat ES variants.

Integrates Dependency-Check reports into SonarQube

历经开发周期多年，并且应用过千万级别项目的工具箱

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.

ASH is an extensible, open source SAST, SCA, and IaC security scanner orchestration engine.

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking

Security Auditor Utility for GraphQL APIs

Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, DarkOwl, and Flare.

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

Connect Falco to your ecosystem

Scirius is a web application for Suricata ruleset management and threat hunting.

Easy and secure implementation of Azure Entra ID (previously AD) for your FastAPI APIs 🔒 B2C, single- and multi-tenant support.

 Permanent TouchID support 👆 for `sudo`.

Light, Secure, Pure Javascript OIDC (Open ID Connect) Client. We provide also a REACT wrapper (compatible NextJS, etc.).

Adds extra security-related features in your Symfony application

An open source AI-native agentic SOC platform

Repair and secure untrusted HTML

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀

:lock: Secure localStorage data with high level of encryption and data compression

Simple, end-to-end encrypted configuration and secrets management

The Secure Microsoft Windows Downloader

A solution for collecting, correlating and visualizing multiple types of logs to help investigate security incidents.

A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.

OWASP Coraza middleware for Caddy. It provides Web Application Firewall capabilities