danielmiessler / SecLists

A collection of security testing wordlists covering usernames, passwords, URLs, fuzzing payloads, web shells, and sensitive data patterns.

PrivateBin / PrivateBin

A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.

pterodactyl / panel

Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.

MISP / MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

danog / MadelineProto

Async PHP client API for the telegram MTProto protocol

matomo-org / matomo

Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome!

digininja / DVWA

Damn Vulnerable Web Application (DVWA)

spatie / laravel-permission

Associate users with roles and permissions

passbolt / passbolt_api

Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

vimeo / psalm

A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications

webpwnized / mutillidae

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

yiisoft / yii2

Yii 2: The Fast, Secure and Professional PHP Framework

twigphp / Twig

Twig, the flexible, fast, and secure template language for PHP

thephpleague / oauth2-server

A spec compliant, secure by default PHP OAuth 2.0 Server

phpseclib / phpseclib

PHP Secure Communications Library

cedar2025 / Xboard

High-performance panel based on V2board secondary development supporting new protocols and new features

bezhanSalleh / filament-shield

The easiest and most intuitive way to add access management to your Filament Panel; Resources, Pages & Widgets through `spatie/laravel-permission`

spatie / laravel-responsecache

Speed up a Laravel app by caching the entire response

symfony / security-bundle

Provides a tight integration of the Security component into the Symfony full-stack framework

FriendsOfPHP / security-advisories

A database of PHP security advisories

symfony / security-core

Symfony Security Component - Core Library

Automattic / jetpack

Security, performance, marketing, and design tools — Jetpack is made by WordPress experts to make WP sites safer and faster, and help you grow your traffic.

symfony / security-http

Symfony Security Component - HTTP Integration

php-standard-library / php-standard-library

PHP Standard Library

tirrenotechnologies / tirreno

tirreno is an open-source framework for building sovereign security, compliance and fraud prevention applications. Detect account takeovers, cyberfraud and business logic abuse inside your product.

phpstan / phpdoc-parser

Next-gen phpDoc parser with support for intersection types and generics

bludit / bludit

Simple, Fast, Secure, Flat-File CMS

php-casbin / php-casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

nette / latte

☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.

reactphp / socket

Async, streaming plaintext TCP/IP and secure TLS socket server and client connections for ReactPHP.

leiweibau / Pi.Alert

Scan the devices connected to your WIFI / LAN and alert you the connection of unknown devices. It also warns if a "always connected" device disconnects. In addition, it is possible to check web services for availability. For this purpose HTTP status codes and the response time of the service are evaluated.

laminas / laminas-zendframework-bridge

Alias legacy ZF class names to Laminas Project equivalents.

laruence / yaconf

Ultra-fast, Secure, and Persistent Configuration Management for PHP

OpenMage / magento-lts

Official OpenMage LTS codebase | Migrate easily from Magento Community Edition in minutes! Download the source code for free or contribute to OpenMage LTS | Security vulnerability patches, bug fixes, performance improvements and more.

poweradmin / poweradmin

Web UI and REST API for PowerDNS: zones, records, DNSSEC, users, with Terraform and Kubernetes integrations

spatie / laravel-csp

Set content security policy headers in a Laravel app

jvoisin / snuffleupagus

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

ZishanAdThandar / pentest

Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.

laravel / serializable-closure

Laravel Serializable Closure provides an easy and secure way to serialize closures in PHP.

scheb / 2fa

Two-factor authentication for Symfony applications 🔐

sourcentis / mercator

Mapping the information system / Cartographie du système d'information

DataDog / dd-trace-php

Datadog PHP Clients

darylldoyle / svg-sanitizer

A PHP SVG/XML Sanitizer

aliyun / openapi-sdk-php

The Alibaba Cloud V1.0 SDK will soon enter the Basic Security Maintenance phase and is no longer recommended for use. V2.0 SDK is available here: https://github.com/aliyun/alibabacloud-php-sdk

harutosati / DeFiVaultDiamond

Robust DeFiVaultDiamond Platform that handles Advanced Security Measures, built for everyday use.

gobuildwp / wordpress-mcp-ai-gobuildwp

GoBuildWP (formerly WPPilot): WordPress MCP server & AI agent for ChatGPT, Claude, Cursor, Codex. Build and edit full websites in Elementor and Gutenberg, run SEO, PageSpeed checks, safe updates, backups and security, many sites via GoBuildWP Cloud. Safety profiles, human approval, undo. Free core; Pro adds WooCommerce and more builders.

CodeByPinar / riskops

BT ve siber güvenlik risk yönetimi platformu — risk envanteri, 5×5 değerlendirme, aksiyon takibi ve kurumsal raporlama. PHP 8.3 + MariaDB, framework ve CDN kullanmadan.

toa-sa / The-Holy-Quran

Enhanced and security-hardened edition of Quran for All — developed with permission from the original developer.

Bubka / 2FAuth

A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes