Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.
- google
- google-api
- nodejs
- client
PHP package for JWT
The first AI agent that builds permissionless integrations through reverse engineering platforms' internal APIs.
A lightweight Facebook library supporting the Graph, Marketing, and Atlas APIs, realtime updates, test users, and OAuth.
Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.
Open source social sign on PHP Library. HybridAuth goal is to act as an abstract api between your application and various social apis and identities providers such as Facebook, Twitter and Google.
- php
- social-login
- social-networks
- facebook
Scan for misconfigured S3 buckets across S3-compatible APIs!
Laravel Sanctum provides a featherweight authentication system for SPAs and simple APIs.
:collision: A boilerplate application for building RESTful APIs Microservice in Node.js using express and mongoose in ES6 with code coverage and JsonWebToken Authentication
APIKit:Discovery, Scan and Audit APIs Toolkit All In One.
- burp-extensions
- apisec
- api-security
- api-sec
Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.
Self-hosted application server for schema-driven APIs, identity, files, automation, integrations, realtime, metering, and protocols.
Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.
A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
An unopinionated authentication library for building Node.js APIs.
An ActionScript 3 Library that contains a number of classes and utilities for working with ActionScript? 3. These include classes for MD5 and SHA 1 hashing, Image encoders, and JSON serialization as well as general String, Number and Date APIs.
Security Auditor Utility for GraphQL APIs
A simple way of authenticating your RESTful APIs with API keys using Laravel
Google OAuth Client Library for Java
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance
- ldap-server
- ldap
- opendj
- rest
OASIS TC Open Repository: Python APIs for STIX 2
- python
- stix
- stix2
- cyber-threat-intelligence