Web Security
Showing 36 of 233 projects
Coherence is a cryptographic server that offloads cryptography operations via a REST API for modern web applications.
A CakePHP plugin that adds two-factor authentication using time-based one-time passwords (TOTP).
A Symfony bundle that adds honeypot spam protection to forms by detecting and blocking automated bot submissions.
An intentionally vulnerable web application for measuring and improving XSS detection in security testing tools.
A PowerShell module for interacting with the urlscan.io API to automate threat hunting and intelligence gathering.
Session-based authentication and role-based security package for Pyramid web applications.
A Go library providing a simplified abstraction layer around acme/autocert for automatic TLS certificate management.
A Plug for Phoenix/Elixir applications that adds security-focused HTTP headers to enhance web application security.
A WordPress plugin that reduces comment spam using a smarter honeypot technique with randomized fields and form expiration.
A high-interaction honeypot for HTTP/HTTPS that emulates vulnerable web applications to observe attacker behavior.
OpenResty module that artificially delays repeated requests to protect sensitive resources from brute-force attacks.
A Phoenix library for sanitizing HTML user input by stripping or allowing specific tags and attributes.
A hybrid AI honeypot for detecting and interacting with mass web application exploitation attempts.
An Elixir Plug middleware for requiring and extracting specific HTTP headers in web applications.
A Python honeyclient for detecting malicious web content through client-side emulation and analysis.
A Plug for Elixir/Phoenix that reads X-Forwarded-For or Forwarded headers to correctly set the client's remote IP.
A PHP middleware that inserts hidden spam trap fields into forms to detect and block spambots.
A Node.js library to detect if a website is running behind Cloudflare's CDN and security services.
An Elixir plug that parses Cloudflare's CF-Connecting-IP header into the remote_ip field for accurate client IP detection.
An Ada framework for OAuth 2.0 and OpenID Connect client/server authentication to secure web applications.
An Express.js honeypot that catches bots scanning for remote and local file inclusion vulnerabilities using fake URLs.
A CakePHP plugin for easy integration of Google reCAPTCHA v2 to protect forms from spam and abuse.
A Plug library for implementing Basic Access Authentication in Elixir web applications.
A set of Plugs and libraries for implementing SSL client certificate authentication in Phoenix applications.
A Fiber middleware that protects against DDoS and bots by requiring clients to solve periodic proof-of-work challenges.
A JavaScript library providing authentication and authorization support for web, desktop, and mobile applications.
A Plug authentication module for Elixir web applications that validates tokens via custom functions.
A Vapor 3 library for validating Google reCAPTCHA submissions in server-side Swift applications.
Redis-based rate limiting middleware for the Fiber web framework with sliding window and GCRA leaky bucket algorithms.
A Deno library for signing and verifying HTTP cookies with built-in integrity protection.
Go middleware for user authentication, session management, and role-based permissions using Redis.
A plugin-based tool for performing GraphQL endpoint vulnerability assessment and security testing.
Angular sanitizer and pipe that uses DOMPurify for secure HTML sanitization with full configuration support.
Simple reCAPTCHA display and verification library for Elixir applications, designed for easy integration with Phoenix.
A JavaScript library for end-to-end encryption with secure key management and recovery to prevent data loss.
An Elixir Plug for simple password-based authentication that stores credentials in cookies.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.