security-tools

cynative

Go

77

Build your own security agents. Open-source framework for agents with live, read-only access to your infrastructure, with no path to widen it. Reasons across AWS, GCP, Azure, Kubernetes, GitHub and GitLab as one system.

ECC

JavaScript

100

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

security-audit-skill

JavaScript

85

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

deepsec

TypeScript

90

Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents

jit

Go

73

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free and local-first.

gh-dashboard

TypeScript

82

Open-source Git dashboard for GitHub, GitLab, and Forgejo: repositories, issues, pull requests, notifications, traffic, CI, contributors, dependents, and kanban boards.

numbat

Go

85

Visibility into AI agent activity on endpoints, with on-device detection, optional pre-action blocking, and forensic reconstruction.

chorus

TypeScript

82

Multi-LLM peer review for code decisions. Bring your own CLI; Chorus convenes 2-4 other LLMs to review the work before you ship.

markitdown

Python

100

Python tool for converting files and office documents to Markdown.

voidauth

TypeScript

87

Single Sign-On for Your Self-Hosted Universe

codex-security

TypeScript

95

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

secluso

Rust

82

A privacy-preserving Raspberry Pi home security camera that uses advanced end-to-end encryption.

Awesome-Hacking

95

A collection of various awesome lists for hackers, pentesters and security researchers

letsseal

JavaScript

72

The open standard for proving any file is real, unaltered and sealed

SpamEater

JavaScript

72

Secure temporary email service with auto-deletion. ModSecurity WAF protected.

supabase

TypeScript

100

The Postgres development platform. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications.