The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)
- findbugs
- java
- security-audit
- owasp
Repository Index
47,133 repositories indexed
25–48 of 79 · Most stars
A material-styled android view that provisions picking of a date, time & recurrence option, all from a single user-interface.
🦎 A lightweight, streaming-native, multi-protocol gateway for AI, APIs, and real-time data. Route LLM requests across providers, govern MCP tools, and connect Kafka, MQTT, and HTTP through one high-performance engine with shared security and observability.
Libraries to help developers express architectural abstractions in Java code
- architecture
- java
- domain-driven-design
Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities
:coffee: SonarSource Static Analyzer for Java Code Quality and Security
- java
- sonarqube
- static-code-analysis
- static-analyzer
Gradle/Maven plugin to package Java applications as native Windows, MacOS, or Linux executables and create installers for them.
- java
- packager
- maven-plugin
- native
DIVA Android - Damn Insecure and vulnerable App for Android
Secure and speedy templates for Java and Kotlin.
- java
- template-engine
- intellij
- kotlin
Apache OFBiz is an open source product for the automation of enterprise processes. It includes framework components and business applications for ERP, CRM, E-Business/E-Commerce, Supply Chain Management and Manufacturing Resource Planning. OFBiz provides a foundation and starting point for reliable, secure and scalable enterprise solutions.
- geospatial
- ofbiz
- web-framework
- java
Android Vulnerability Test Suite - In the spirit of open data collection, and with the help of the community, let's take a pulse on the state of Android security. NowSecure presents an on-device app to test for recent device vulnerabilities.
ZeroTurnaround Process Executor
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
- openam
- sso
- oauth
- saml
Efficient execution and functional composition of database calls using jdbc and RxJava Observables
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
Oversecured Vulnerable Android App
- appsec
- android-security
- vulnerable-application
- vulnerable-android-apps
jHiccup is a non-intrusive instrumentation tool that logs and records platform "hiccups" - including the JVM stalls that often happen when Java applications are executed and/or any OS or hardware platform noise that may cause the running application to not be continuously runnable.
Microservices library - scalecube-services is a high throughput, low latency reactive microservices library built to scale. It features: API-Gateways, service-discovery, service-load-balancing, the architecture supports plug-and-play service communication modules and features. built to provide performance and low-latency real-time stream-processing
- microservices
- reactive-streams
- distributed-systems
- service-mesh
🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included
- tls
- truststore
- certificate
- keystore
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Security profiling for blackbox Android
The New Official Aparapi: a framework for executing native Java and Scala code on the GPU.
- aparapi
- gpu
- opencl
- java
Gravitee.io - OpenSource API Management
- api
- api-management
- gateway
- java