Local-first, open-source security gateway for AI coding agents. Enforce tool-call policies, detect secrets, and audit actions on-device.
- ai-agent-security
- ai-agents
- agent-security
- ai-security-tool
Repository Index
55,640 visible repositories in the index
121–144 of 182 · Most stars
Galah: An LLM-powered web honeypot.
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
- beacons
- blue-team
- c2
- command-and-control
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
Local-first password manager with direct device-to-device sync
- password-manager
- totp-authenticator
- security
- security-tools
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
Skills and career roadmap for various security roles like application security, cloud security, DevSecOps, security engineer, security researchers, pentesting, api security, network security, mobile security and so on with helpful resources, guidelines
- security-tools
- security-automation
- aws-security
- cloud-security
:hammer: Manage your website via terminal
- php
- security-tools
- python
- pentest
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
- ids
- teler
- waf
- teler-ids
Credentials catching honeypot
- honeypot
- deception
- security
- security-tools
A static analysis tool for security
- php
- static-code-analysis
- security-tools
- vulnerability-scanners
Passive DNS Capture and Monitoring Toolkit
- passivedns
- passive-dns
- dns-server
- dns
Visualize network topologies and collect graph statistics based on pcap files
- network-topology
- python
- pcap
- security-tools
Kraken: A multi-platform distributed brute-force password cracking system
- kraken
- kraken-client
- security-tools
- security
Hashcat web interface
- hashcat
- cracking
- analytics
- pentesting
Awesome information for WebSockets security research
AWS Identity and Access Management Visualizer and Anomaly Finder
File Scanning Framework
- security-tools
- network-defense
- file-analysis
- file-analyzer
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
- cybersecurity
- cybersecurity-tools
- incident-response
- security
CMS/LMS/Library etc Versions Fingerprinter
- fingerprinting
- cms
- security-tools
Collecting & Hunting for IOCs with gusto and style
- threat
- hunting
- ioc
- security-tools
Secure shell history commands by finding sensitive data