SivaSaiKrishnaSuryadevara / docker-mcp-guardian

Security-hardened MCP server for Docker with read-only defaults, restart deny-lists, and secret redaction

cosmicstack-labs / mercury-agent

Soul-driven AI agent with permission-hardened tools, token budgets, and multi-channel access. Runs 24/7 from CLI, Telegram or More.

runzhliu / deepseek-harness-docker

Community Docker and Kubernetes packaging for DeepSeek Harness (@deepseek-ai/dsh), with a hardened image, Compose stack, Helm chart, Web UI, and headless CLI.

sparr-sherrya / hlocation-release

HLocation hardened builds and signed verification files

sandstorm-io / sandstorm

Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager.

GrapheneOS / hardened_malloc

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

cloud-gouv / securix

SécurixOS is a NixOS-based secure operating system tailored for small to medium-sized teams. It provides a minimal, hardened environment with strong isolation, reproducibility, and policy-driven configurations to ensure operational security and compliance.

endojs / endo

Endo is a distributed secure JavaScript sandbox, based on SES

openclaw / openclaw-ansible

Automated, hardened Clawdbot installation with Tailscale VPN, UFW firewall, and Docker isolation

rtvkiz / minimal

Minimal CVE Hardened container image collection

WMAL / kodachios

Kodachi OS is a Debian-based privacy & security OS by Warith Al Maawali, built for uncompromising privacy, anonymity, and reliability. It pairs hardened defaults with a curated toolkit for private browsing, advanced networking, and incident response, all in an intuitive interface.

jasonbitsmith / vps-first-steps

A single, readable bash script that takes a fresh Ubuntu/Debian VPS from default install to a hardened, ready-to-use server.

toa-sa / The-Holy-Quran

Enhanced and security-hardened edition of Quran for All — developed with permission from the original developer.

boundary-bench / boundary-bench

BoundaryBench: benchmark coding-agent harnesses (Claude Code, Codex, Terminus 2, Grok) on Terminal-Bench tasks under hardened NIST-derived sandbox policies. Inspect AI + Harbor compatible.

Claude-Reverser / IDA-instances-MCP

Custom build of ida-pro-mcp - stability-hardened MCP server for hosting headless IDA Pro instances