Ranked by Attention Score: stars gained over the last 180 complete days
89 repositories by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
Connect your agents & product to 1,000 APIs.
The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
The most comprehensive authentication framework
🕵️♂️ All-in-one OSINT tool for analysing any website
A modern and easy to use dashboard. 80+ integrations. 20K+ icons built in. Authentication out of the box. No YAML, drag and drop configuration.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
A fully open source & end-to-end encrypted note taking alternative to Evernote.
Enable Opencode to authenticate against Antigravity (Google's IDE) via OAuth so you can use Antigravity rate limits and access models like gemini-3-pro and claude-opus-4-5-thinking with your Google credentials.
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
The AI Agent for Cyber Security.
A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.
Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord
Cross-platform desktop GUI app to clean image metadata
A powerful obfuscator for JavaScript and Node.js
Authentication for the Web.
Think fearlessly with end-to-end encrypted notes and files. For issues, visit https://standardnotes.com/forum or https://standardnotes.com/help.
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.
Android Reverse-Engineering Workbench for VS Code
Deprecated in favour of Video.js 10; security fixes only until January 2028. UI components and hooks for building video and audio players on the web.
📈 Open source, privacy-first web analytics — a cookie-less Google Analytics alternative with built-in error tracking and performance monitoring. Self-host it or use our cloud. Get started for free!
CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access
Google's officially supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
Help secure Express apps with various HTTP headers
OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
🔥 A well-tested feature-rich modular Firebase implementation for React Native. Supports both iOS & Android platforms for all Firebase services.
Secure peer-to-peer chat that is serverless, decentralized, and ephemeral
Audited & minimal JS implementation of hash functions, MACs and KDFs.
Instant thought capture for macOS. One shortcut, post-it appears, type, close.
Open Source Cloud Native Application Protection Platform (CNAPP)
Authentication, simple and clean
Audited & minimal JS implementation of elliptic curve cryptography.
OpenID Connect (OIDC) and OAuth2 protocol support for browser-based JavaScript applications
Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.
Sandbox for developing and testing UI components in isolation
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
OpenScribe is an open-source AI scribe that records patient encounters and generates structured clinical notes automatically. You keep full control over data, workflows, and patient privacy with no vendor lock-in.
2000+ crypto svg icons for react
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
Open-source OSINT intelligence dashboard tracking the Iran conflict in real time — live DeckGL/MapLibre conflict map, 30 bias-labeled feeds, actor dossiers, and daily briefs. Live at conflicts.app.
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
Auditable & minimal JS implementation of public-key post-quantum cryptography
Audited & minimal JS implementation of Salsa20, ChaCha and AES
Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes
Efficient embeddable adblocker library
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
A self-hosted markdown notes taking app with live preview, document encryption, multi-user support, multi-organization capabilities and more
An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser
Security training for the apps you actually ship. Open your browser and start hacking.
A JavaScript/TypeScript API for interacting with the XRP Ledger in Node.js and the browser
Authentication Providers and UI components for Microsoft Graph 🦒
Fastest 5KB JS implementation of secp256k1 signatures and ECDH
Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!
Fastest 5KB JS implementation of ed25519 signatures
Codesign Electron macOS apps
AI-ready reference architecture for Angular / ASP.NET Core projects. A hardened foundation with secure authentication, authorization, role and user management, and consistent patterns designed to be safely extended by AI tools. Stop letting AI hallucinate your auth and DB logic - give it a production-grade foundation to build on.
Support for OAuth 2 and OpenId Connect (OIDC) in Angular.
🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀
🛡️ The missing GraphQL security security layer for Apollo GraphQL and Yoga / Envelop servers 🛡️
Authentication plugin for Payload CMS
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
Interoperable web-based DICOM slide microscopy viewer and annotation tool
◢ High-perfomance, self-hosted and privacy-focused web analytics service. Written in Go.
:key: Cross-Platform Passwords & Secrets Vault
A production-ready SaaS template built with Next.js 15, Supabase, and Tailwind CSS. Includes authentication, user management, file storage, task management demos, and secure RLS policies. Now with a complete React Native + Expo mobile app template! Easily customizable with pre-built themes, i18n support (EN/PL/ZH), and legal documents.
File transfer solution with end-to-end encryption.
Your users download a 4GB AI model, the connection drops at 3.8GB, verifyfetch resumes from 3.8GB and verifies every byte. Drop-in integrity verification for Transformers.js, WebLLM, and any large file in the browser.
A flexible playground for Android CTF challenges.
Capacitor plugin for Google Auth. Lightweight & no dependencies.
Cross-platform desktop LLM client for OpenAI ChatGPT, DeepSeek R1, Anthropic Claude and more, with a focus on privacy and security.
Encrypted .env files with TOTP unsealing for production deploys. Cross-stack (Node + Java). Zero deps. Defends against npm supply-chain attacks.
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
A Payload CMS 3 plugin for Auth.js/NextAuth 5
Graph-based security analysis for everyone
Voxel browser game inspired by Minecraft
Privacy-first Chrome extension for real-time website security analysis using on-device AI. Trust scores (0-100), phishing detection, SSL verification, cookie compliance & AI chatbot powered by WebLLM with zero external data transmission.
Is this app legit? Check before you connect. Free URL security scanner for indie developers and AI builders. Live at trustscanpro.com
A Boilerplate for deno RESTful apis