Zentral is a control plane for secure, observable Apple endpoints in enterprises. Configure, observe, and enforce the desired state of every Apple endpoint. Manage that desired state as code through GitOps and Terraform.
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
Catch risky npm dependency changes before they merge.
Docker Scout CLI
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
- enterprise-software
- kubernetes
- audit-logs
- enterprise-ready
Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️
- aws
- aws-billing
- aws-cli
- aws-cost-explorer
AWS Identity and Access Management Visualizer and Anomaly Finder
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
Enhance the security of your web applications effortlessly with AWS Firewall Factory. Safeguard your valuable assets through seamless WAF deployment, updates, and staging, all centrally managed with AWS Firewall Manager.
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Deploy a Cloudflare Worker to sanely score users' new passwords with zxcvbn AND check for matches against haveibeenpwned's 10+ billion breached accounts
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
A docker container to simplify and secure the use of Infrastructure as Code (IaC)
drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templates
Community curated list of System and Network policy templates for the KubeArmor and Cilium
- runtime-security
- kubearmor
- cilium
- system-policy
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
Static analysis from configs → Kubernetes NetworkPolicies in seconds
Provision strong AWS security policies easily using the AWS CDK, v1 or v2.
Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.
A framework to manage development and testing environments