Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Find secrets with Gitleaks 🔑
⚙️ NGINX config generator on steroids 💉
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
PHP Secure Communications Library
CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.
Automated Security Testing For REST API's
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
A helm plugin that help manage secrets with Git workflow and store them anywhere
NIST Certified SCAP 1.2 toolkit
Splunk Security Content
- splunk
- detection
- engineering
- responses
Static asset revisioning by appending content hash to filenames: `unicorn.css` → `unicorn-d41d8cd98f.css`
- gulp-plugin
- rev
- javascript
- hash
ECDH and ECDSA for 8-bit, 32-bit, and 64-bit processors.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
pure-python ECDSA signature/verification and ECDH key agreement
Audited & minimal JS implementation of elliptic curve cryptography.
Fastest 5KB JS implementation of secp256k1 signatures and ECDH
Collection of pure Rust elliptic curve implementations: NIST P-224, P-256, P-384, P-521, secp256k1, SM2
Cryptographic signature algorithms: DSA, ECDSA, Ed25519
- ecdsa
- ed25519
- signatures
- dsa
Robust ABC (ActionScript Bytecode) [Dis-]Assembler
JSON Web Token library
- jwt
- jwt-bearer-tokens
- rsa-signature
- hmac
The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
Small portable Elliptic-Curve Diffie-Hellman in C
- elliptic-curve-diffie-hellman
- ecdh
- public-key-cryptography
- c