Search awesome repositories

Send encrypted PGP messages with one click

Small tool to inform you about potential risks in project dependencies list

Free, open-source macOS app that locks applications with Touch ID, Apple Watch, and trusted Wi-Fi. The only open-source app locker for macOS.

MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

[WIP] Simple mobile applications sandbox file browser tool. Powered with [frida.re](https://www.frida.re).

MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.

Cyclops 是一款具有 XSS 检测功能的浏览器

macOS menu-bar app for fine-grained VPN routing: bypass the VPN for chosen domains/services, force others through it, or (Custom mode) route each domain/subnet out a specific egress — direct, a specific VPN, an HTTP/SOCKS5 proxy, or a Tailscale peer. Includes a vpnb CLI.

High-performance SQL parser, formatter, linter & security scanner for Go - 1.5M+ ops/sec, multi-dialect, zero-copy, race-free

Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects

🌲 Configuration flaws detector for Hadoop, MongoDB, MySQL, and more!

Row Level Security for Django

CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.

Task-scoped authorization for AI agents. Cryptographic warrants constrain tools and arguments, prevent privilege escalation at every delegation hop, and produce signed evidence of what was allowed or denied.

Packet communication investigator

MCP server for AI agent for cybersecurity: automate assessment of documents, questionnaires & reports. Multi-format parsing, RAG knowledge base,Risks, compliance gaps, remediations.

The open source security engine for AI agent and supply-chain trust.

Android library to verify the safety of user devices. Make sure that API calls from your app can be trusted. Instantly detect rooted devices, emulators, cloned apps, and other risk factors.

🐕 Self-hosted security-first AI agent · 28 providers · 11 chat channels · WebUI · 3-level memory · task-schedule · automation · skills · MCP

Validate environment variable usage in codebase

CLI tool for running coding agents inside hardware-isolated microVMs

Upload files securely

A server-side TypeScript and JavaScript library immune to Regular Expression Denial of Service (ReDoS) attacks by using Rust and linear RegEx under the hood. Regolith has a linear worst case time complexity, compared to the default RegExp found in TypeScript and JavaScript, which has an exponential worst case.

Displays a red warning banner if you are running an insecure Django release.

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

Checks filenames to be committed against a library of filename rules to prevent sensitive files in Git

Advanced analysis software for APK payloads created by RATs.

Package verification for npm

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

Elevate arbitrary MSR writes to kernel execution.