
smolvm
An embeddable, portable, branchable virtual machine to safely run Agents locally.

An embeddable, portable, branchable virtual machine to safely run Agents locally.

OWASP framework cataloging the top 10 security risks in neocloud and AI data center infrastructure, covering hardware, networking, isolation,…

Technical whitepaper dissecting JioPC cloud VDI architecture, including hardware specs, session termination mechanisms, and security limitations,…

A list of awesome penetration testing tools and resources.

Hardware-bound & Cloud-gated binary execution, cryptographic provenance, and anti-tamper envelope sealing for Crystal.

Secure, fast, and portable C90 implementation of ML-KEM / FIPS 203

AI-ready knowledge base of security & compliance regulations for hardware and connected-device manufacturers - structured, indexed, and…


The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS…

Meaningful control of data in distributed systems.

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

Declarative KVM/QEMU VM orchestration tool using YAML compose files. Manages multi-VM stacks with cloud-init, SSH, PCI passthrough, and image…

SécurixOS is a NixOS-based secure operating system tailored for small to medium-sized teams. It provides a minimal, hardened environment with strong…

Vendor-neutral OWASP project mapping quantum-era security risks with a Top 10 risk list, mitigation guidance, and threat models for post-quantum…

Toolkit for decoding, inspecting, and modifying UEFI firmware volumes and variable stores. Supports secure boot certificate enrollment, PE binary…

cMCP: Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.

A do everything Redfish, KVM, GUI, and DBus webserver for OpenBMC

Immutable Linux OS image optimized for running Incus containers and virtual machines, with UEFI Secure Boot, TPM 2.0 disk encryption, and automated…