Tools

rknf404/chromium-hardening-guide

Harden chromium (somewhat) for privacy and security (and performance)

andresriancho/enumerate-iam

Enumerate the permissions associated with AWS credential set

nu11secur1ty/cisco

Security auditing toolkit for Cisco network devices, focusing on configuration review, vulnerability detection, and penetration testing of enterprise…

sorami-consulting-au/ai-kubernetes-helm-chart-security

Evidence and data for the Sorami technical report on security defaults of 15 AI serving, vector database and MCP Helm charts on Kubernetes.

itskill-jp/wordpress-upgrade-check

Read-only check of every WordPress core version on a server. Flags CVE-2026-87902 (fixed in 7.1.2 and backports), auto-updates turned off, and…

asmitdesai/ubuntils

Python CLI/TUI for forensic triage of Ubuntu systems — detects and remediates persistence mechanisms with artifact collection, timeline correlation,…

mondoohq/cnspec

An open source, cloud-native security to protect everything from build to runtime

philippeabraxas-jpg/tbp-network

Theory and implemantation of the TBP protocol to secure networked AI in small to open web networks

nationwide-group-oss/cryptoptic

CodeQL-based scanner that inventories cryptographic function calls across repositories and GitHub organizations, producing a Cryptographic Bill of…

vpierre/ndaal_public_sbom_auditor

Offline single-binary web app that ingests CycloneDX, SPDX and syft SBOMs, runs an ensemble of CVE scanners, enriches findings with EPSS, CISA-KEV…

intuitem/ciso-assistant-community

GRC platform for risk management, compliance, and audit with 200+ frameworks, automatic control mapping, vulnerability management, and incident…

owasp-noir/alibi

Cross-check the views of your attack surface and find the endpoints that cannot corroborate each other.

jithinkrishnanrs/stylesmuggler-ioc-toolkit

StyleSmuggler (CVE-2026-75650) IOC toolkit for Magento Open Source and Adobe Commerce. Detect compromised stores, Rust implants, PHP web shells,…

disrex-group/stylesmuggler-adobe-patches

composer require delivery of Adobe's official APSB26-146 (CVE-2026-75650) fix for Magento, via cweagans/composer-patches. Auto-selects the patch for…

safeagent-beihang/clawguard

Enterprise AI agent security toolkit providing pre-flight auditing, configuration hardening, runtime threat detection, and active defense against…

dev-sec/puppet-os-hardening

This puppet module provides numerous security-related configurations, providing all-round base protection.

emrekybs/hawkopsec

One-tap Linux OPSEC hardening & anonymity toolkit

xiaoqimikko/thymeleaf-check

Offline checker for Thymeleaf CVE-2026-40477 / CVE-2026-41901 — tells you which of the two CVSS 9.0 SSTI flaws you are exposed to, and whether your…