sdk
cosignet/sdkThin TypeScript + zero-dep Python client and recipes to gate high-risk actions behind a payload-bound passkey approval.
api-securityauthenticationauthentication-authorization+3
cosignet/sdkThin TypeScript + zero-dep Python client and recipes to gate high-risk actions behind a payload-bound passkey approval.
ransomleak/training-application-securityInteractive secure coding training with hands-on SCORM exercises covering OWASP Top 10 web and API vulnerabilities, Git/secrets exposure, and…
semgrep/semgrepLightweight static analysis for many languages. Find bug variants with patterns that look like source code.
commando-x/vuln-bankIntentionally vulnerable banking platform for practicing web application, API, and AI/LLM security testing, secure code review, and DevSecOps…
infobyte/faradayOpen Source Vulnerability Management Platform
akto-api-security/aktoOpen-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…
owasp-noir/noirHunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.
42crunch/api-security-audit-actionAutomates static API security auditing of OpenAPI contracts in CI/CD, running 300+ checks for authentication, authorization, and data constraints,…
arian-gogani/enforcement-coverageFinds API routes carrying weaker authorization than their siblings. Recovered CVE-2026-45316 from source. Includes the negative results.
git-pkgs/proxyA lightweight caching proxy for package registries.
teycir/apihunterAsync API security scanner in Rust for CORS, CSP, GraphQL, JWT, OpenAPI, and active API posture checks.
seqra/opentaintFormal inter-procedural taint analysis engine for application security. Tracks untrusted data across function boundaries, persistence layers, and…
shoucheng3/jenkinsci__docker-commons-plugin_cve-2022-20617_1-17Jenkins plugin providing shared API for Docker credential management, registry authentication, daemon configuration, and image fingerprinting across…
mukul975/cve-mcp-serverProduction-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan,…
studiomeyer-io/mcp-stdio-shellguardDefense-in-depth bundle for MCP stdio servers: drop-in guardExec/guardSpawn wrappers, AST audit CLI, reference MCP server. Closes the Ox-Security…
owasp/threat-dragonAn open source threat modeling tool from OWASP
fariszr/knockerKnocker, a knock based access control service for your homelab
clidey/deptrustCLI and MCP server that checks package versions for known vulnerabilities across 14+ ecosystems including npm, PyPI, crates.io, Go modules, and…