luantak / is-malicious

A codebase scanner that helps you not run malicous code

al007ex / jscvm

compiles your JS to encrypted bytecode run by a obfuscated bundled vm

grepleaks / grepleaks

Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.

iktok90-design / ai-smart-contract-auditor

AuditSentry — AI-powered smart contract security auditor for Claude Code. Automated vulnerability detection, exploit PoCs, mainnet-fork simulation, and professional audit reports for Solidity & Vyper across all EVM chains.

Carlos-Dominguez-faber / adversarial-review

Kit de la clase Adversarial Review (Imperio Agéntico): app de demo con 43 fallas + prompts de auditoría UI/UX/seguridad + checklist + reporte real de Codex Security.

ahmadjawad533 / 90-days-of-cloud-engineering

Free 90-day cloud engineering roadmap: Linux, Python, AWS, Docker, Kubernetes, Terraform, CI/CD and security, with hands-on labs and a capstone project. Go from zero to job-ready. AWS free-tier friendly.

hueyexe / opencode-auto-permissions

Automatic, model-driven permission review for OpenCode

mscodemonkey / eufy-mega-security

Event-first Eufy camera gateway and Home Assistant integration

toddynho / randomkeygen

Free client-side password and key generator for secure passwords, API keys, UUIDs, JWT secrets, and encryption keys. Powered by the Web Crypto API.

0xdnd / ctf-tracker

Free offline CTF tracker for HackTheBox & TryHackMe — OSCP/CPTS/CRTO exam simulator, writeups, cheatsheets.

cisco-open / SOC-Cockpit

SOC Cockpit is a web-based operational command console for SOC (Security Operations Center) managers. It is designed around dense, shared operations workflows with AI assistants.

ovasendin / markdown_preview_editor

Self-hosted, privacy-first Markdown editor & live preview. Documents never leave your browser: no backend, no tracking, strict CSP, sandboxed preview.

Lukie-81 / RepoRelay

Secure MCP access to local repositories — without shell, Git, or arbitrary writes.

OpsMaxx / OpsMaxx

Free, open-source SSH client, SFTP, tunnels, database GUI and a secure AI-agent (MCP) bridge in one app a MobaXterm, PuTTY and Termius alternative for Windows, macOS and Linux.

NicholasFlemmer / styx-app

Styx is where everything converges: every repo you work in, the AI coding agents building in them, and every login they need to ship. Switch between all of it from one window. And like the river it's named after, nothing crosses over without you. Deploying, or touching live data, asks you first.

SparkShieldLab / deepseek-harness-security-guard

A local, rule-based security guard for DeepSeek Harness agents. It hooks agent tool calls and prompt assembly and applies a policy table with allow / block / ask / warn decisions.

minervacomputing / harness

Governed AI agents for sensitive data and business-critical apps. Agents never hold credentials: a gateway checks every call against per-resource permissions, and each answer runs in a sealed container.

nanocoai / nanoclaw

A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK

phasehq / console

Secrets management for teams and AI agents.

OWASP / cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

christiangrey922 / multi-agent-workflow-lab

Testing and observability for multi-agent delegation, MCP tools, permissions, sandboxed actions, prompts, and workflow replay.