
BloodBash
Offline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…

Offline AD/Entra attack-path analyzer for SharpHound/AzureHound JSON. Surfaces prioritized privilege escalation, credential, and misconfiguration…

GRC platform for risk management, compliance, and audit with 200+ frameworks, automatic control mapping, vulnerability management, and incident…

Policy-governed LLMSecOps framework providing AST-based SAST, secret scanning, supply-chain and multi-cloud CSPM checks, AI-BoM generation, and CI/CD…

Six Degrees of Domain Admin

A collection of awesome security hardening guides, tools and other resources

⭐⭐ Join us at SNIA SDC for the SMB3 IO Lab (September 28 - October 1, 2026), see upcoming Interoperability Events

Kerberos RC4 deprecation: detection, remediation and guidance (CVE-2026-20833)

Azure AD Password Checker

Entra ID Password Protection Banned Password Lists

A curated list of awesome Security Hardening techniques for Windows.

Idempotent functions for IBM Security Appliance REST APIs. Currently covering ISAM and ISDS Appliances.

A small lambda script that will disable access keys older than a given amount of days.

A WordPress plugin exposing an MCP server over the REST API, with the security model as the point -- closes the CVE-2026-15015 OAuth-bypass shape by…