Tools

owasp/owasp-top-10-ai-infrastructure-security-risks

A practical framework identifying and prioritizing the top security risks in AI datacenter infrastructure, covering hardware, networking, management…

renich/pyrite

Hardware-bound & Cloud-gated binary execution, cryptographic provenance, and anti-tamper envelope sealing for Crystal.

pq-code-package/mlkem-native

Secure, fast, and portable C90 implementation of ML-KEM / FIPS 203

smol-machines/smolvm

Branchable computing by using a portable, lightweight, self-contained virtual machine

platanor/hardware-compliance-handbook

AI-ready knowledge base of security & compliance regulations for hardware and connected-device manufacturers - structured, indexed, and…

torvalds/linux

Linux kernel source tree

cloud-gouv/securix

SécurixOS is a NixOS-based secure operating system tailored for small to medium-sized teams. It provides a minimal, hardened environment with strong…

kc57/awesome-pentest

A list of awesome penetration testing tools and resources.

freax13/cve-2023-46813-poc

Proof-of-concept exploit for CVE-2023-46813 targeting AMD SEV-SNP. Escalates privileges by manipulating hypervisor memory type changes to swap task…

wolfssl/wolfssl

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS…

owasp/quantum-security-project

Vendor-neutral OWASP project mapping quantum-era security risks with a Top 10 risk list, mitigation guidance, and threat models for post-quantum…

sys-dissect/jiopc-architecture-whitepaper

Technical whitepaper dissecting JioPC cloud VDI architecture, including hardware specs, session termination mechanisms, and security limitations,…

roxanne_ardary/ai-and-the-automobile

Curated collection of open specifications for AI-integrated vehicle systems, covering autonomy, perception, navigation, energy management, safety,…

megamansec/gixy-next

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

agentrust-io/cmcp

cMCP: Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

kraxel/virt-firmware

Toolkit for decoding, inspecting, and modifying UEFI firmware volumes and variable stores. Supports secure boot certificate enrollment, PE binary…

lxc/incus-os

Immutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…

microsoft/igvm

Rust library and format specification for creating and loading Independent Guest Virtual Machine (IGVM) files, supporting hardware-isolated VMs with…