Go implementation of the Data At Rest Encryption (DARE) format.

MCP Monitoring with eBPF

A comprehensive security checklist for MCP-based AI tools. Built by SlowMist to safeguard LLM plugin ecosystems.

opkssh (OpenPubkey SSH)

This collection provides a series of roles, plugins, and modules to manage your Tailscale Tailnet and Linux machines.

A TypeScript implementation of the age file encryption format, available as an npm package or as a bundled .js file.

PostgreSQL zero-downtime migrations made easy

An extremely fast Python package and project manager, written in Rust.

pgx mock driver for golang to test database interactions

This repository is the home of the River reverse proxy application, based on the pingora library from Cloudflare.

The authentication glue you need.

An online multiplayer version of the threat modeling card games: Elevation of Privilege (EoP), OWASP Cornucopia, OWASP Cumulus, and Elevation of MLsec.

Stakeholder-Specific Vulnerability Categorization

A Git-compatible VCS that is both simple and powerful

A simple HTTP proxy that fogs over naughty URLs

An online multiplayer version of the Elevation of Privilege (EoP) threat modeling card game

The AWS Secrets Manager Agent is a local HTTP service that you can install and use in your compute environments to read secrets from Secrets Manager and cache them in memory.

Ubuntu 24.04 LTS (Noble Numbat) Docker container for Ansible playbook and role testing.

SQL query builder and ORM/Factory generator for Go with support for PostgreSQL, MySQL and SQLite

Generate Go client and server boilerplate from OpenAPI 3 specifications

Open-source dev tools for enterprise SSO. Ship SAML + SCIM support this afternoon.

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Gram is Klarna's own threat model diagramming tool

A GitHub App that acts like a Security Token Service (STS) for the Github API

Build terminal forms and prompts 🤷🏻‍♀️

Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical hackers and security engineers.

Python SDK, Proxy Server (LLM Gateway) to call 100+ LLM APIs in OpenAI format - [Bedrock, Azure, OpenAI, VertexAI, Cohere, Anthropic, Sagemaker, HuggingFace, Replicate, Groq]

Awesome secure by default libraries to help you eliminate bug classes!

Tool to remove Copilot licenses from inactive users