
Updates
Short editorial updates from published cybersecurity tools.


oathkeeper
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s)…

keepassxc
Secure offline storage of credentials with encrypted vaults, password generator, TOTP, YubiKey/OnlyKey support, browser integration, and CLI.

in-toto
Protects software supply chain integrity by verifying each step is performed by authorized functionaries, using signed layout and link metadata.

fixing-google-secops-detections
Tuning and refactoring Google Chronicle Curated Detections to eliminate alert fatigue and fix logic gaps/bugs.

AIX360
Interpretability and explainability of data and machine learning models

hcaptcha-challenger
🥂 Gracefully face hCaptcha challenge with multimodal large language model.

chaoskube
Periodically terminates random Kubernetes pods to test how systems behave under arbitrary pod failures, supporting namespace, label, annotation, and…

kube-monkey
An implementation of Netflix's Chaos Monkey for Kubernetes clusters

failpoint
Fault-injection library for Go that adds runtime-controllable failpoints to trigger panics, sleeps, returns, and conditional error paths via…

offensive-ai-compilation
A curated list of useful resources that cover Offensive AI.

WebGoat
Deliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…