Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.
This is the development tree. Production downloads are at:
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go
A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.
A secure and easy-to-use store for your production secrets
CTF in a box. Minimal setup required. (not production-ready yet)
🚀 Production-ready AI-friendly Go REST API boilerplate with Clean Architecture, JWT auth, RBAC, PostgreSQL migrations, and highly tested. AI-optimized with built-in guidelines for most used IDEs. Docker hot-reload, Swagger docs, one-command setup. Build production APIs in minutes, not weeks.
Safe access to production databases
- acl
- database
- database-access
- database-security
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.
Go client for Meta's Threads - OAuth 2.0, rate limiting, full API coverage, production-ready
A production-ready Go SDK for TRON: gRPC client with connection pooling, HD wallets, TRC-10/TRC-20, event decoding, transaction simulation, and shielded TRC-20 (Sapling) support. 85% test coverage.