OpenShell
nvidia/openshellSandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound…
ai-securityauthentication-authorizationcloud-security+7
21.1k
nvidia/openshellSandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound…
mongodb/kingfisherDetect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
openziti/zitiZero-trust networking platform that makes services invisible with cryptographic identity, policy-based access, and end-to-end encryption. Replaces…
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
zentinelproxy/zentinelA security-first reverse proxy built to guard the free web.
canyonroad/agentshExecution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.
owasp/open-sammyWeb-based tool for assessing and tracking software security maturity using the OWASP SAMM and DSOMM models, with Docker support and automated mailing.
moltis-org/moltisA secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord,…
gravitational/teleportThe easiest, and most secure way to access and protect all of your infrastructure.
roxanne_ardary/securekitSecurekit is a protocol-agnostic security kernel that enforces zero-trust, sandboxed execution for AI tool use. It sits between any LLM or agent…
rajsidwadkar/uap-protocolA unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…
kamalsrini/sentinel-cveCLI tool that explains CVEs in plain English and scans repos for impact. Powered by Claude.
shoucheng3/kubernetes-client__java_cve-2020-8570_client-java-parent-9_0_2_fixedJava client library for the Kubernetes API, enabling programmatic management of clusters, pods, deployments, and other resources with support for…
shoucheng3/jenkinsci__docker-commons-plugin_cve-2022-20617_1-17Jenkins plugin providing shared API for Docker credential management, registry authentication, daemon configuration, and image fingerprinting across…
shoucheng3/fabric8io__kubernetes-client_cve-2021-4178_5-0-2Java client providing fluent DSL access to Kubernetes and OpenShift REST APIs for managing cloud-native infrastructure, pods, services, and…
0xbingo/cve-2025-1974A minimal test tool to help detect annotation injection vulnerabilities in Kubernetes NGINX Ingress controllers. This script sends a crafted…
