Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
🕵️♂️ All-in-one OSINT tool for analysing any website
Authentication for the Web.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Bitwarden client apps (web, browser extension, desktop, and cli).
- webextension
- javascript
- bitwarden
- typescript
🔥 A well-tested feature-rich modular Firebase implementation for React Native. Supports both iOS & Android platforms for all Firebase services.
Deprecated in favour of Video.js 10; security fixes only until January 2028. UI components and hooks for building video and audio players on the web.
Secure peer-to-peer chat that is serverless, decentralized, and ephemeral
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
- enterprise-software
- saml
- saml2
- saml-service-provider
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
📈 Open source, privacy-first web analytics — a cookie-less Google Analytics alternative with built-in error tracking and performance monitoring. Self-host it or use our cloud. Get started for free!
The AI Agent for Cyber Security.
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
【全链哨兵】全流程渗透测试 Agent 系统,支持 Web、小程序、安卓 APP、IOS app(测试中)。安全服务渗透测试辅助工具,禁止用于非法攻击。
Open source privacy-friendly analytics
Capacitor plugin for Google Auth. Lightweight & no dependencies.
Authentication plugin for Payload CMS
2000+ crypto svg icons for react
Enhance the security of your web applications effortlessly with AWS Firewall Factory. Safeguard your valuable assets through seamless WAF deployment, updates, and staging, all centrally managed with AWS Firewall Manager.
Create and verify JSON Web Tokens (JWT) with Deno or the browser.
Encrypted Chat. No History. No Logs.
Interoperable web-based DICOM slide microscopy viewer and annotation tool
Your users download a 4GB AI model, the connection drops at 3.8GB, verifyfetch resumes from 3.8GB and verifies every byte. Drop-in integrity verification for Transformers.js, WebLLM, and any large file in the browser.
- ai-models
- browser
- fetch
- integrity