Tools

lore-hex/quill-router

TrustedRouter.com repo for secure LLM proxying

raskrebs/sonar

CLI tool for inspecting and managing services listening on localhost ports

vicanso/pingap

A reverse proxy like nginx, built on pingora, simple and efficient.

rezmoss/sbomlyze

Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.

sigstore/cosign

Code signing and transparency for containers and binaries

praetorian-inc/trajan

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

firezone/firezone

Enterprise-ready zero-trust access platform built on WireGuard®.

github/codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

nearai/ironclaw

Secure, private AI agent operating system with local encrypted storage, OAuth/SSO authentication, policy-based access control, and extensible…

hashicorp/vault

A tool for secrets management, encryption as a service, and privileged access management

openai/codex-security

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm:…

anchore/grype

A vulnerability scanner for container images and filesystems

open-policy-agent/opa

Declarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…

anchore/syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

dependency-check/dependencycheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

nilsteampassnet/teampass

Collaborative Passwords Manager

securego/gosec

Go security checker