Automation and Convention
8 projects
A pluggable framework for automated decryption of data and unlocking of LUKS volumes using pins like Tang, TPM2, and PKCS#11.
An extensible Python framework for network forensic analysis through plugin-based dissection of packet captures.
A collaborative collection of data and code quirks to improve password manager compatibility with websites.
Code libraries and bindings
7 projects
A modular file scanning and analysis framework that automates running a suite of tools and aggregates their output.
A PowerShell module for interacting with VirusTotal's API to analyze suspicious files, URLs, domains, and IP addresses.
A lightweight Python wrapper for Censys APIs, enabling search, bulk data access, and ASM asset management.
A high-level C++ library for crafting, decoding, and sniffing network packets with a Scapy-like interface.
Orchestration, Automation, and Response (SOAR)
1 projectsCloud platform security
7 projects
Visualizes AWS IAM and Organizations as a graph using Neo4j to identify security anomalies and privilege escalation paths.
A tool for quickly evaluating IAM permissions and identifying security risks in AWS accounts through graph-based analysis.
An open-source cloud security platform that automates security and compliance assessments across AWS, Azure, GCP, and other cloud providers.
An open-source multi-cloud security auditing tool that assesses cloud environment security posture via provider APIs.
An application kernel for containers that provides strong isolation by implementing a Linux-like interface in memory-safe Go.
Distributed monitoring
5 projectsKubernetes
11 projects
A security inspection tool for managed Kubernetes clusters that identifies common misconfigurations via Docker container and web UI.
A Kubernetes controller and tool for encrypting Secrets into SealedSecrets that can be safely stored in Git.
A Kubernetes-native utility that monitors TLS certificate expiry and exposes metrics to Prometheus.
A Kubernetes admission controller that enforces security and reliability policies for workloads in multi-tenant clusters.
A Kubernetes operator that creates checkpoint snapshots of running pods for offline forensic analysis after security incidents.
Export Kubernetes events to multiple destinations like Elasticsearch, Slack, and Opsgenie with flexible routing and filtering.
Meshes
2 projectsCommunications security (COMSEC)
5 projects
DevSecOps
18 projects
A custom AppArmor profile generator for Docker containers that simplifies security configuration.
A simple wrapper for GPG to encrypt secrets in version control systems like Git, Mercurial, and Subversion.
Static vulnerability analysis for container images (OCI/Docker) via an API that indexes and matches against known security flaws.
A comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOMs in containers, Kubernetes, code, and clouds.
A Helm plugin that manages secrets using Git workflows and integrates with cloud secret managers.
Application or Binary Hardening
4 projectsCompliance testing and reporting
2 projectsDependency confusion
3 projects
An open-source, modular framework to detect and prevent dependency confusion attacks across multiple package managers.
A tool to detect and mitigate Dependency Confusion supply chain security risks in npm projects.
Fuzzing
3 projects
Policy enforcement
5 projects
A GitHub App that continuously monitors and enforces security policies across organizations and repositories.
A stateless server for binding data decryption to network presence using asymmetric cryptography, providing a secure alternative to key escrow.
Supply chain security
4 projects
A Helm plugin for signing and verifying Helm charts using GnuPG, offering easier and more secure operations than default Helm commands.
A client and server implementation of The Update Framework (TUF) for securing software distribution and updates.
Honeypots
3 projects
Deploy honeytokens across your network to detect unauthorized access and data exfiltration attempts.
A modular OSINT honeypot that monitors adversary reconnaissance attempts and generates early-warning intelligence for blue teams.
