better-isms / grcskills

Open GRC skills for AI agents. By ISMS Copilot.

affaan-m / ECC

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

gatsbyjs / gatsby

React-based framework with performance, scalability, and security built in.

cloudflare / security-audit-skill

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

OWASP / CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

sampotts / plyr

Deprecated in favour of Video.js 10; security updates only. Simple HTML5, YouTube and Vimeo player.

MobSF / Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

motdotla / dotenv

Loads environment variables from .env for nodejs projects.

amark / gun

An open source cybersecurity protocol for syncing decentralized graph data.

cure53 / DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

projectdiscovery / nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Piebald-AI / claude-code-system-prompts

All parts of Claude Code's system prompt, 27 builtin tool descriptions, sub agent prompts (Plan/Explore/Task), utility prompts (CLAUDE.md, compact, statusline, magic docs, WebFetch, Bash cmd, security review, agent creation). Updated for each Claude Code version.

jason5ng32 / MyIP

The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.

upgundecha / howtheysre

A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)

sandstorm-io / sandstorm

Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager.

dotenvx / dotenvx

a secure dotenv—from the creator of `dotenv`

RetireJS / retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

patriksimek / vm2

Advanced vm/sandbox for Node.js

aquasecurity / cloudsploit

Cloud Security Posture Management (CSPM)

animir / node-rate-limiter-flexible

Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.

2factorauth / twofactorauth

List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software.

m0bilesecurity / RMS-Runtime-Mobile-Security

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

pwndoc / pwndoc

Pentest Report Generator

skills / secure-code-game

Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about security. Get started for free in under 2 minutes, playing right from your browser.

video-react / video-react

Deprecated in favour of Video.js 10; security fixes only. A web video player built for the HTML5 world using React library.

Shuffle / Shuffle

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

eslint-community / eslint-plugin-security

ESLint rules for Node Security

Ch0pin / medusa

Mobile Edge-Dynamic Unified Security Analysis

Kritt-ai / open-kritt

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

gautamkrishnar / nothing-private

Do you think you are safe using private browsing or incognito mode?. :smile: :imp: This will prove that you're wrong. Previously hosted at nothingprivate.ml

salesforce / cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

lirantal / npq

safely install npm packages by auditing them pre-install stage

ming-soft / MCMS

🌈A free, commercially usable, open-source Java CMS system, 🔥supporting visual drag-and-drop web design, SpringBoot3, Vue3, element plus, 🔥localization, 🔥information innovation, 🔥security assurance, regularly collecting issues and updating versions, providing hundreds of templates and multiple practical plugins, offering code generators and ski

robinkarlberg / transfer.zip-web

A self-hostable complete file-sharing solution that focuses on reliability, security and ease of use.

hectorm / otpauth

One Time Password (HOTP/TOTP) library for Node.js, Deno, Bun and browsers.

thalesgroup-cert / Watcher

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

pashov / skills

Pashov Audit Group Skills

3641397194-wq / gpt6-Astra

gpt6 Astra-claude-grok4.7-deepseekv4.1flash-glm5.3-gemini破甲越狱 · 冷咖啡 BREAK//OPEN 工作台

hackademix / noscript

The popular NoScript Security Suite browser extension.

protofire / solhint

Solhint is an open-source project to provide a linting utility for Solidity code.

prompt-security / clawsec

A complete security skill suite for OpenClaw, Hermes, PicoClaw and NanoClaw agents (and variants). Protect your SOUL.md (etc') with drift detection, live security recommendations, automated audits, and skill integrity verification. All from one installable suite.

helicalinsight / helicalinsight

Free, open source BI platform with AI conversational analytics (BYO-LLM), pixel-perfect paginated reports, interactive dashboards, SSO, embedding, multi-tenancy & row-level security. Every feature free in Community Edition. Self-hosted, Docker-ready

endojs / endo

Endo is a distributed secure JavaScript sandbox, based on SES

D0n9X1n / hexo-blog-encrypt

Yet, just another hexo plugin for security.

v-fidelusaleksander / ghcertified

Prepare for GitHub Certification exams!

spr-networks / super

One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access

lirantal / lockfile-lint

Lint an npm or yarn lockfile to analyze and detect security issues

asamassekou10 / ship-safe

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.

mrrfv / cloudflare-gateway-pihole-scripts

Use Cloudflare Gateway DNS/VPN to block ads, malware and tracking domains - free alternative to NextDNS, Pi-hole and AdGuard

Juwan-Hwang / Zephyr

Zephyr: A modern, lightweight, and secure Mihomo / Clash Meta GUI client built with Tauri and Rust.

renniepak / CSPBypass

CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains.

gitleaks / gitleaks-action

Protect your secrets using Gitleaks-Action

w3c / trusted-types

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

darama22 / Malware-Research-Hub

Self-contained malware research hub: curated catalog of 80 families (1971-2024) + 2,764 real encrypted samples, indexed and searchable. Local Flask app, bilingual.

firewalla / firewalla

http://firewalla.com

scrapfly / Antibot-Detector

Real-time detection of anti-bot systems, captchas & fingerprinting techniques. Identifies Cloudflare, Akamai, DataDome, reCAPTCHA, hCaptcha, Shape Security & more with confidence scoring and advanced capture tools.

Webba-Creative-Technologies / vice

VICE is a security auditing CLI tool that finds vulnerabilities in your web applications.

FradSer / dotclaude

A comprehensive development environment with specialized AI agents for code review, security analysis, and technical leadership.

levelsio / superlevels

A super Chrome extension I made that's safer than installing external malware/spyware-filled extensions that form a massive security risk, this one is open source and you can read and check the source code (with AI) before you install it, and customize it to your liking!

karanb192 / claude-code-hooks

🪝 Claude Code hooks + an installable plugin marketplace: safety, cost, observability, productivity.