47,133 repositories indexed
1–12 of 12 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
Software Supply Chain Transparency Log
Cryptographic Primitive Code Generation by Fiat
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
Public repository for improvements to the EXTRABACON exploit
Traceroute improved wrapper for CSIRT and CERT operators
XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.
Runtime guardrails for Claude Code. Auto-approve what's safe, gate what's risky, block what's dangerous. Dual enforcement, full audit trail. MIT.
Sandboxed devcontainer for running Claude Code, Codex, and OpenCode in bypass / auto-approve mode.
AI writes. SPARDA proves. A deterministic, offline gate that catches when an AI edit removes a guard, exposes a route, or breaks an invariant — no API key, right in the agent edit loop.
Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.