opennhp
opennhp/opennhpA lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the…
authentication-authorizationdefensive-toolsencryption-decryption-tools+3
13.9k
Tools for blue team, defensive security, and threat protection.
opennhp/opennhpA lightweight, cryptography-powered, open-source toolkit built to enforce Zero Trust security for infrastructure, applications, and data in the…
corazawaf/corazaGo-based Web Application Firewall library compatible with ModSecurity SecLang rules and OWASP Core Rule Set v4, providing real-time HTTP traffic…
laugiov/scambusterDefensive engagement & threat intelligence research laboratory. Converts inbound scam emails into actionable IOCs through controlled, policy-driven…
linux-audit/audit-kernelGitHub mirror of the Linux Kernel's audit repository
getprobo/proboOpen source solutions for SOC2, GDPR, and ISO27001
denoland/clawpatrolWire-level proxy firewall for AI agents that intercepts and gates SQL, Kubernetes, and HTTP traffic using HCL rules, with per-process tunnel…
netblue30/firejailLinux namespaces and seccomp-bpf sandbox
spinfosecurity/rail-ot-protectorRail-OT-Protector (ROP) — free, open-source cybersecurity scanning tool for rail and transit OT/SCADA networks. PowerShell + Bash scanners for…
stephanev/risk-analysis-editorBrowser-based risk analysis editor for building risk matrices, risk registers, and action plans. Supports EBIOS RM, ISO 27005, and CNIL DPIA with…
a13xp0p0v/kernel-hardening-checkerA tool for checking the security hardening options of the Linux kernel
sanaullahamanullah/xss2shell-checkNon-destructive detector for CVE-2026-64638 (XSS2Shell) — WordPress pre-auth XSS reflection primitive
inflightsec/agent-vault-proxyJust-in-time API keys for AI agents - and any other process you route through it: the caller only ever sees a placeholder.
sigmahq/pysigmaPython library to parse and convert Sigma rules into queries (and whatever else you could imagine)
eh-amish/windows-defender-security-auditor-cve-2026-50656-Read-only PowerShell security auditor for Windows endpoints and servers: checks Defender configuration, patch status, credentials, persistence,…
matthart1983/netwatchReal-time network diagnostics in your terminal. One command, zero config, instant visibility.
atomiczsec/adrenalineC2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automation.
theretardedelon/gpewebdefenderLightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.