Security · GitHub

Software Supply Chain Security Platform

• Repo configuration and security: Simplify configuration and management of security settings and policies across repos.
• Proactive security enforcement: Continuously enforce best practice security configurations by setting granular policies to alert only or auto-remediate.

Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders

• Extensive Lists of Bad and Known Bad Bots and Scrapers (updated almost daily)
• Blocking of Spam Referrer Domains and Web Sites

86-tool OSINT MCP server with private evidence graphs, image analysis, reverse search, and person dossiers.

Lightweight open-core SIEM in Rust — S3-compatible for logs, Postgres for state.

High-performance, memory-safe pure-Rust redesign of Impacket protocols and Active Directory tools for Linux, macOS, and Windows.

• Cross-Platform Host & Target Ecosystem: Runs natively on Linux (glibc & static musl), macOS (Apple Silicon & Intel), and Windows. Interacts with both Linux/UNIX targets (Samba, FreeIPA, OpenLDAP, MIT/Heimdal Kerberos KDC) and Windows domains across all eras (Windows 2000 through Windows Server 2025).
• Sub-Millisecond Cold Starts: Starts in < 2ms compared to 150-250ms for Python Impacket, making it ideal for massive orchestrations and fast pivoting.

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• Proxy-first by design - intercept, replay and edit live traffic, with the whole toolset one click away.
• Detection that stands up - crawl and audit with the proven OWASP ZAP engine, so the findings hold up.

Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.

ShortDot registry abuse investigation across seven TLDs: zone analysis, phishing evidence, classified IOC feeds and STIX exports.

Real-time threat intelligence platform with threat feeds, vulnerability tracking, attack surface monitoring, and threat actor intelligence.

• 🔍 Live Attack Detection - Tails nginx, auth, syslog and journald, and polls inbound connections to the ports you serve. Detects SQLi, XSS, path traversal, RFI, SSH brute force, port scans, SYN floods, DNS tunneling.
• 🛡️ Code Security Scanner - Scan a codebase for hardcoded secrets and risky code patterns; --deps checks lockfile versions against OSV.dev. Text, JSON or SARIF output.

Community curated list of search queries for various products across multiple search engines.

Security-focused Laravel static analyser

Pentest Report Generator

• Collaborative editing: several users write the same audit in real time (TipTap 3, Hocuspocus/Yjs), WYSIWYG editor with tables, images with captions, bar and pie charts, spellchecker (LanguageTool) and code blocks with syntax highlighting (css, js, http, ts, html, bash, sql, json: choose the language in the menu of the code block)
• Links between findings: with {@identifier | bookmarkCreate | p} in the template, type ::: in the editor to link another finding with a hyperlink