KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
KeygraphHQ / shannon
lissy93 / web-check
🕵️♂️ All-in-one OSINT tool for analysing any website
nanocoai / nanoclaw
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
Infisical / infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
fosrl / pangolin
Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.
lissy93 / personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
javascript-obfuscator / javascript-obfuscator
A powerful obfuscator for JavaScript and Node.js
juice-shop / juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
openai / codex-security
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
helmetjs / helmet
Help secure Express apps with various HTTP headers
OpenCTI-Platform / opencti
Open Cyber Threat Intelligence Platform
reconurge / flowsint
A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.
berty / berty
Berty is a secure peer-to-peer messaging app that works with or without internet access, cellular data or trust in the network
vercel-labs / deepsec
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
tutao / tutanota
Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.
yaklang / yakit
Cyber Security ALL-IN-ONE Platform
snyk / cli
Snyk CLI scans and monitors your projects for security vulnerabilities.
dmno-dev / varlock
AI-safe .env files: Schemas for agents, Secrets for humans.
AdventDevInc / kudu
Free Windows, Mac and Linux cleaner, scanner, and more.
vidstack / player
Deprecated in favour of Video.js 10; security fixes only until January 2028. UI components and hooks for building video and audio players on the web.
onecli / onecli
Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
metorial / metorial
Connect any AI model to 1200+ integrations (MCP, CLI, API)
express-rate-limit / express-rate-limit
Basic rate-limiting middleware for the Express web server
CyberStrikeus / CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
chaterm / Chaterm
Open source AI terminal for cloud and infrastructure management, enabling you to deploy, troubleshoot, and automate services using natural language and intelligent agents.
colinlet / PHP-Interview-QA
系统性的 PHP 技术面试问答大全（面经）。涵盖 PHP8、MySQL、Redis、Nginx、系统设计、算法、Laravel 源码及高并发架构原理，助你斩获后端研发 Offer。PHP Interview Questions & Answers.
flick9000 / winscript
Open-source tool to build your Windows script from scratch. It includes debloat, privacy, performance & app installing scripts.
voidauth / voidauth
Single Sign-On for Your Self-Hosted Universe
altcha-org / altcha
GDPR, WCAG 2.2 AA, and EAA compliant, self-hosted CAPTCHA alternative with PoW mechanism.
szTheory / exifcleaner
Cross-platform desktop GUI app to clean image metadata
botswin / BotBrowser
Advanced Privacy Browser Core with Unified Fingerprint Defense: Cloudflare, Akamai, Kasada, Shape, DataDome, PerimeterX, hCaptcha, FunCaptcha, Imperva, reCAPTCHA, ThreatMetrix, Adscore
boxlite-ai / boxlite
The micro-VM for AI agents — light enough to embed on your laptop, elastic enough to power an agentic cloud.
mitre-attack / attack-navigator
Web app that provides basic navigation and annotation of ATT&CK matrices
kyantech / Palmr
🌴 Palmr. is an open-source file-sharing platform focused on privacy and security. It enables users to upload, manage, and share files with features like password protection, custom links, and access control without tracking or limitations. Designed for seamless and secure sharing, Palmr. is completely free.
alangrainger / immich-public-proxy
Share your Immich photos and albums in a safe way without exposing your Immich instance to the public.
onury / accesscontrol
Role and Attribute based Access Control for Node.js
m14r41 / PentestingEverything
Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
vmoranv / jshookmcp
A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.
trycompai / comp
AI Native platform to get companies compliant - Vanta & Drata Alternative
ninoseki / mitaka
A browser extension for OSINT search
kenryu42 / cc-safety-net
A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.
node-opcua / node-opcua
Unlocking the Full Potential of OPC UA with Typescript and NodeJS - http://node-opcua.github.io/
github / codeql-action
Actions for running CodeQL analysis
lissy93 / domain-locker
🌐 The all-in-one tool, for keeping track of your domain name portfolio. Got domain names? Get Domain Locker!
potatameister / PaperKnife
Privacy-first PDF utility (Zero-Server Architecture). Merge, split, compress, and edit PDFs 100% locally on your device. No uploads, no servers, no tracking.
omegaee / my-fingerprint
保护你的浏览器指纹 | Protect Your Browser Fingerprints | Chrome, Edge, Firefox | 扩展 / Extension
nowsecure / r2frida
Radare2 and Frida better together.
ChiChou / grapefruit
Open-source mobile security testing suite for iOS and Android. Previously Passionfruit
wotschofsky / domain-digger
Full Toolkit for Next-Level Domain Analysis
affaan-m / agentshield
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️
step-security / harden-runner
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
damienbod / angular-auth-oidc-client
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow
reversenseorg / dexcalibur
Reversense (Dexcalibur2) is a fully rewriting and rethinking of Dexcalibur. Reversense is a binary intelligence platform that automates the reverse engineering of mobile and embedded applications.
APTRS / APTRS
Automated pentest reporting with custom templates, project tracking, customer dashboard and client management tools. Streamline your security workflows effortlessly!
melandlabs / openloomi
OpenLoomi is an open-source AI coworker. It connects your work tools, understands what you’re working on, and tells you what needs your attention, why it matters, and what to do next. It’s your open-source Attention Agent.
reconmap / reconmap
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.
phasehq / console
Secrets management for teams and AI agents.
jdevalk / specification.website
Website specification — HTML, accessibility, security, SEO, agent-readiness. Platform-agnostic, sourced, MIT.
s0ld13rr / pentestcode
PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.
agsh / onvif
ONVIF client for all ONVIF devices with TypeScript types. Supports Profiles S/T/G/M/C/A, WS-Discovery, WS-Security/Digest, Events, Media/Media2, PTZ, Recording/Replay, and a 0.x compatibility layer.