
core
OPNsense GUI, API and systems backend

OPNsense GUI, API and systems backend

Monorepo of OWASP Bug Logging Tool projects: crowd-sourced vulnerability reporting, bug bounty workflows, CVE namespace, autopatching, and security…

Pluggable linting tool to prevent committing credential.

Ephemeral microVM sandbox for AI agents with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Boots in under a second,…

Next-generation dependency vulnerability scanner with reachability analysis, SBOM generation, license audit, and container image scanning for CI/CD…

YAML-driven framework for testing Web Application Firewall (WAF) rules using OWASP Core Rule Set baselines. Automates regression detection and…

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Agent skill + script to scan projects for CVE-2026-111497 (Brotli), rate criticality and suggest fixes

Maintains the TUF repository that securely delivers the Sigstore trust root (trusted_root.json) to clients, using keyholder threshold signing, KMS…

Kubernetes-native security scanning orchestrator that automates continuous vulnerability detection by integrating multiple open-source scanners into…

An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

Zero-trust SSH bastion proxy with Vault-backed key management, RBAC policy enforcement, full session recording, and admin TUI for auditable access to…

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

Your agent is a security risk, so treat it like one. yoloAI does AI agent sandboxing right.

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

A lightweight, file-based CLI API client with age-encrypted secrets, first-class GraphQL support, and a built-in MCP server for AI agent workflows.

Generates least-privilege AWS IAM policies based on resource ARNs and access levels, automating secure policy creation for cloud infrastructure.