
monty
A secure Python sandbox, written in Rust, for code written by AI.

A secure Python sandbox, written in Rust, for code written by AI.

Secure runtime to sandbox AI agent tasks. Run untrusted code in isolated WebAssembly environments.

Docker-based sandbox for coding agents with isolated environments, preinstalled agent tooling, service control, and workspace bootstrap for secure…

Secure, private AI agent operating system with local encrypted storage, OAuth/SSO authentication, policy-based access control, and extensible…

Secure (with AEAD) version of USTP, called USTP-Secure (ustps://)

AES-256 file and directory encryption tool with interactive CLI, progress bar, and optional secure deletion of originals. Supports large files and…

Secure expression evaluator - Drop-in replacement for expr-eval without CVE-2025-12735 vulnerability

A collection of Claude Code skills that help security teams stay secure

Automated PowerShell orchestrator for applying Secure Boot mitigations against CVE-2023-24932 (BlackLotus). Handles registry changes, reboots,…

Firecracker made simple. Spin up secure microVMs in milliseconds, from install to interactive shell in one command.

A lightweight CLI tool to interactively search and access your KeePassXC database entries using fzf. Fast, secure, and terminal-centric.

English translation

A lightweight utility designed to detect and remediate systems affected by CVE-2024-3094, a critical vulnerability impacting [insert affected…

A Bash script to mitigate the CVE-2024-6387 vulnerability in OpenSSH by providing an option to upgrade to a secure version or apply a temporary…

Python script to scan and secure SSH configurations against the CVE-2024-6387 race condition vulnerability, with automated LoginGraceTime adjustment…

Shell script and Ansible playbook to detect and remediate CVE-2024-3094 in xz-utils by checking package versions, upgrading or downgrading to a…

PowerShell script to apply Zenbleed (CVE-2023-20593) MSR workaround on Windows

Python script that automatically patches GitHub Actions workflow files to replace deprecated and insecure ::set-env and ::add-path commands with the…