Security middleware
-
@andersmyrmel/vard
Lightweight prompt injection detection for LLM applications. Zod-inspired chainable API for prompt security.
-
abtars
Agent harness connecting messaging platforms, with persistent memory, skills, scheduled tasks, self-healing supervision, and distributed multi-agent collaboration
-
accessflow
Open-source database & API access governance platform A SQL, NoSQL, and API proxy that puts review, approval, and audit between your team and production data and services.
-
action-pin-check
Audit GitHub Actions workflows for mutable or missing action pins.
-
ACYBER-Wayback-Machine-Downloader
📥 Download historical files from the Internet Archive Wayback Machine with our Python tool, supporting proxies, retries, and customizable settings.
-
Advanced PassGen
Generate passwords with ease.
Security Android -
Advanced PortChecker
Check if TCP ports are open.
Security Android -
Aer - Fork of Anemo
Private storage utility for android with support for external storage media
-
AFWall+
Control network traffic
Security Android -
agent-bom
AI supply-chain & cloud security scanner and self-hosted control plane — agents, MCP, packages, cloud estate, non-human identities, and LLM cost. SBOM/SARIF, graph attack-paths, runtime enforcement, and compliance evidence.
-
agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
-
agent-core
Enterprise-grade AI agent engine. Lightweight, secure, MCP-native. Built in Rust.
-
agent-egress-bench
Provide an open test corpus to assess and improve AI agent egress security through validated cases and automated workflows.
-
ai-code-reviewer
🔍 AI-powered automated code review tool that analyzes syntax, performance bottlenecks, and security flaws in pull requests.
-
AI-Security-Platform
Control plane for enterprise AI security: inline runtime guardrails, automated red teaming with auto-remediation, AI asset posture (AI-SPM), and compliance governance. Python control plane + Go inline agent.
-
aicheck-scan
Fail the build if your PR ships an exposed self-hosted AI service. Live-probes Ollama, n8n, vLLM, Langfuse, Open WebUI and 12 more — graded A–F report, fix-card links, SARIF code scanning.
-
ailang-world
An AI-native semantic operating environment: a local-first, immutable typed world graph whose transaction language is AILANG. Agents propose, deterministic verification commits, humans govern.
-
aileron
Tamper-evident flight recorder for AI agents - hash-chained, signed audit log of every tool call, with MCP proxy policy enforcement and anomaly detection.
-
AirGuard - AirTag protection
AirGuard detects trackers that are used for stalking and warns you.
Security Android -
akmon
Tamper-evident evidence and verification layer for AI agents. Verify any agent's session offline with just openssl. No cloud, no lock-in.
-
AliasVault
Privacy-first Password Manager with Built-in Email Aliasing
Security Android -
Amber
Nostr event signer for Android
Security Android -
android-agent
Control Android devices through ADB with this Python automation framework for task execution and phone farm scaling.
-
App Lock
Secure your sensitive apps with powerful biometric protection using AppLock!
Security Android -
AppVerifier BG
Verify installed apps against shared signature hashes and databases.
Security Android -
atlas.compass
🔒 Securely manage passwords locally in the terminal with AES-256 encryption and zero-knowledge master key control using atlas.compass.
-
AttackMap
AI-assisted defensive security analysis for codebases.
-
attestral
Open-source security scanner for MCP servers and AI agents: finds prompt injection, tool poisoning, and excessive agency, and models the cloud your agents can reach. pip install attestral.
-
authgent
Open-source MCP-OAuth conformance scanner + IETF reference implementation of draft-ietf-oauth-identity-chaining-14 and draft-ietf-oauth-transaction-tokens-08. CLI + GitHub Action + hosted scanner + public registry. Apache 2.0.
-
Authnkey
Passkey credential provider for hardware security keys
Security Android -
Authorizer
Password Manager with USB Keyboard emulation
Security Android -
AutoPassCrack
🔑 Automate brute-forcing web login forms with ease. Enjoy flexible options like custom generation and advanced field detection for efficient password cracking.
-
AWSBestPracticesSkill
Unofficial source-linked AWS best practices for every AWS service, organized by Well-Architected pillar for Claude Code, OpenAI Codex, and AI coding agents.
-
AZL-Truth
Universal Operating Logic For Anything That Understands It - Via Infinite Mapping with the Casteelian Coordinate & Count
-
Banana Split
Split secrets into QR-code shards using Shamir's Secret Sharing
Security Android -
batesian
Active security scanner for A2A and MCP servers
-
because
🌟 Simplify decision-making with because, a lightweight tool that helps you weigh options clearly and efficiently.
-
BinderFuzzy - Pentest Android Services
An App intended for fuzzing the Binder interface and System Services of Android.
Security Android -
blackList
Automated threat-intelligence pipeline compiling daily curated DNS blacklists for adblocking, malware, spam, and security filters.
-
BLE Radar
A tool to monitor, analyze and find BLE devices around you.
Security Android -
Blink Comparison
Simplifies comparing photos of tamper-evident seals using your eyes
Security Android -
Bluecheese
Offline text encryption-fast, local, no trackers.
Security Android -
BlueGate
Android client to control bluegate BLE gate controller
Security Android -
BluePass
BluePass extracts 2FA tokens from SMS and forwards them via Bluetooth
Security Android -
bonklm
Enforce security guardrails for large language models in Node.js applications to manage risks and maintain safe usage across platforms and providers.
-
bv-mcp
Open-source DNS & email security scanner. One MCP endpoint, 57 checks, zero install. Cloudflare Workers.
-
CarVita
Personal assistant for managing and predicting your vehicle's maintenance needs.
Security Android -
Casbin
Authorization library supporting access-control models like ACL, RBAC, and ABAC.
-
Cassette-Account-Password-Manager
self-hosted, offline password manager with AES encryption securely store, organize, and protect account credentials in an encrypted personal vault inspired by Cassette & KeeWeb.
-
cavra
CAVRA - Controlled Agentic Verification & Runtime Authority. Before the agent acts, CAVRA decides. CAVRA is a runtime governance and authority layer for AI coding agents.
-
cerebro
Security and compliance superpowers for coding agents.
-
Certance-Field
Cut your GitHub Copilot token bill, locally. Certance Field compresses oversized context before it reaches the model, redacts and scans for secrets, and exports audit evidence. No cloud, no external calls.
-
cheburnet-router
Раздельное туннелирование для всего дома на OpenWrt: домашняя зона — напрямую, остальное — через AmneziaWG VPN. Шифрованный DNS (DoH) с фильтрацией рекламы, семейный режим, kill-switch. Всё в ядре Linux — хватает 128 МБ RAM. Веб-мастер настройки за ~10 минут. Образовательный open-source.
-
Citrine
Nostr relay for Android
Security Android -
claude-whatsapp
Connect your WhatsApp number to Claude Code to automate messages and manage conversations.
-
clauderabbit
ClaudeRabbit is a free, open-source security product protecting the open-source community from malware. We clone any public GitHub repo into an isolated sandbox, run it, and return one honest safety score.
-
clawseccheck
🦞 Free, local, read-only security self-audit for your own OpenClaw AI-agent setup. Scores it A–F, surfaces the urgent holes, emits copy-paste fixes. Zero deps, no network, no API key — your data never leaves your machine.
-
CleanSlate
Protect your data anywhere anytime
Security Android -
cli
The Vibgrate CLI scans your codebase for upgrade drift — the gap between the dependency versions you run and the versions you should run. It produces a deterministic Upgrade Drift Score (0–100), a full context-aware dependency graph, and actionable findings enriched with AI-assisted upgrade guidance to help you maintain a healthy, secure codebase.
-
cloud-ai-security-skills
Cloud and AI security automation skills: OCSF-shaped evidence, detection engineering, audit, compliance, MCP workflows, and HITL-controlled operations.
-
clubeira
Backend SaaS multi-tenant para clubes de vouchers por assinatura, com Elixir, Phoenix, PostgreSQL RLS e billing transacional.
-
comis
Open-source security-first runtime for AI agents that learn and act across sessions.
-
contextduty
Policy-driven context firewall for AI workflows — redact secrets and PII before prompts leave your machine
-
copyleftdev
Systems-level software engineer building security tools, developer infrastructure, and AI-native systems in Rust, Go, and Zig. 560+ open source repositories.
-
crewscore
Find the safety rules your AI agent prompt forgot. Checks 23 published controls — injection defense, human approval, cost limits, stop conditions. Offline CLI + GitHub Action + in-browser checker. No API key, no LLM.
-
Cryptographic ID
Attest the trustworthiness of a device using asymmetric cryptography
Security Android -
CryptoKeyLab
Enterprise-grade Cryptography-as-a-Service (CaaS) & Offline WebAssembly Playground. Built with .NET 9, Clean Architecture, Dapper, and Redis supporting 115+ algorithms.
-
CryptoSafe
Offline AES-256-GCM text encryption with Argon2id
Security Android -
CryptX
Simple Android Cryptography Toolkit
Security Android -
depup
Drop-in npm packages with all dependencies updated to latest. 1000+ packages, refreshed every 4 hours.
-
Derandom
Pseudo random number predictor
Security Android -
Diceware Password Generator
Generate diceware passwords
Security Android -
Disabler
Disable any applications, and easily enable it with a pretty customisable launch
Security Android -
DissPair
Bluetooth security toolkit
Security Android -
DmarcAnalyzerApp
Open-source, self-hosted DMARC monitoring for agencies — unlimited domains, automatic report ingestion, no per-domain pricing.
-
DNS Toggle
Easily toggle and automate Private DNS through the Quick Settings panel.
Security Android -
dracon-utilities
Invisible infrastructure for Dracon developer workspaces: git sync, system guard, and warden encryption utilities.
-
draugr
Developer-first security scanning orchestration — describe your app in one file, run many scanners (SAST, SCA, secrets, IaC, containers, headers), get one SARIF verdict for CI & code scanning.
-
Droid_SCEP
Get certificates from a SCEP server and monitor the expiration
Security Android -
DroidCrypt
A file and text encryption tool for Android
-
Dumpsys Packages Copycat
Provides a detailed summary of all installed packages
Security Android -
Duress
Duress password trigger
Security Android -
DuressKeyboardLite
Keyboard with DuressPassword feature.
Security Android -
e-Passport Reader
use the NFC chip to communicate with an electronic passport
Security Android -
emilia-protocol
Consequence firewall for machine actions. EMILIA Gate verifies exact authority before money, code, permissions, infrastructure, or regulated state changes; the open protocol makes the evidence independently verifiable.
-
Encrypt Text
Minimalistic application to encrypt plain text using AES 256.
Security Android -
End of Updates Checker
Check until when your phone gets updates.
Security Android -
entropy-chaos
Test APIs by generating custom attack scenarios using large language models to uncover logic flaws beyond standard scanners.
-
EphemeralWorkProfile
Profile owner Android privacy app.
Security Android -
escape-goat
Escape a string for use in HTML or the inverse
-
ESUP-NFC-TAG-DROID
ESUP-NFC-TAG-DROID works as a client of an ESUP-NFC-TAG server. Android 5 (or +)
Security Android -
etheram
🔧 Develop, compile, and deploy smart contracts effortlessly with the Etheram plugin for Atom, enhancing your Ethereum programming experience.
-
Fahrraddiebstahlwarnung
Bicycle thefts and accidents in Berlin
Security Android -
Fake Contacts
Create fake phone contacts, for data-poisoning.
Security Android -
Fauxx - Privacy Through Noise
Poison data collection profiles by generating decoy signals.
Security Android -
FMD edge
Locate and control your device remotely
Security Android -
forgeterm
Monitor AI coding agents in real-time to block unauthorized file access, network connections, and dangerous commands while enforcing system resource limits.
-
freebsd-industrial-edge-ai-secure-device
Demonstrate secure FreeBSD ARM64 edge AI devices that collect telemetry and run embedded AI with containerized data science and real-time ML pipelines.
-
Gateflow
Physical access control systems today operate in isolation from marketing and business intelligence. Real estate developers, gated compounds.
-
gecko-surf
The knowledge graph for APIs your agent can trust. Maps any API — even messy, paywalled, or on-chain ones — into a verified graph your agent traverses instead of guessing, and simulates any action to a receipt before money moves.
-
genversion
A command line utility to read version from package.json and attach it into your module as a property
-
gh-actions-lock
A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact commit.
-
gh-safe-repo
Python CLI that creates GitHub repos with safe defaults — branch protection, Dependabot, secret scanning, and pre-flight security scanning — applied automatically.
-
ghir
ghir is a CLI making past GitHub Releases immutable
-
github-autopilot
🤖 23 AI-Powered GitHub Bots — Health, Security, Deploy, Create, Self-Upgrade. 2026.
-
github-command-center
Manage GitHub pull requests, issues, notifications, and local git tasks in one self-hosted app built with Go and React.
-
github-well-architected
Apply design thinking to build and ship your software securely and at scale with GitHub
Security TypeScript -
gl0bal01
AppSec, OSINT & DFIR enthusiast developing investigation tools, Discord bots, and security automation systems.
-
GPS Setter
A GPS setter based on the Xposed framework.
Security Android -
gradle-wrapper-validator
A validator for gradle/wrapper jar binaries, intended to be used in CI pipelines.
-
Guerrilla Mail
Quickly receive anonymous and temporary mails.
-
gurgl
Local-first egress hygiene for MCP servers: capture, diff, and allowlist what your AI-agent tools contact on the network.
-
hackmyagent
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
-
hacksimulator
Browser-based terminal simulator voor ethisch hacken leren - Veilige omgeving voor Nederlandse beginners
-
Hash Droid
Verify file integrity
Security Android -
Haven
Isolate and run multiple instances of apps using Work Profiles
Security Android -
headscale-install
Install and configure a Headscale server on Linux with automated setup, user management, and verified binaries
-
hexgraph
Self-hosted, agentic vulnerability research for binaries & firmware: an AI agent decompiles, fuzzes, and verifies exploits inside a sandbox, recording every finding to a typed graph. BYOK, fully local.
-
HiddenProtectedWorkProfile
Hidden Profile owner Android security app.
Security Android -
hideout
Run AI agents and untrusted CLIs in a local VM without losing host-native workflows.
-
huqan
Local-first, deterministic verification layer for AI claims, memory writes, and risky actions.
-
Hypatia
A real-time malware scanner
Security Android -
Inter Profile Sharing
Easily share media and text between Android user profiles
Security Android -
intutic
The open source circuit breaker for AI agents. Real-time security, secret DLP, graph guardrails and loop burn prevention for Claude Code, Cursor, Antigravity, LangGraph, n8n and many more.
-
ironclaw
Security-first, self-hosted AI agents - isolation you can prove, not just promise.
-
IsPhoneEncrypted
Check if the disk is fully encrypted
Security Android -
IYPS - Is Your Password Secure?
Evaluate passwords, predict crack times, and get tips for stronger passwords.
Security Android -
job-hunter
Automated job scraping pipeline for security engineer roles. Python + GitHub Actions + Gemini API.
-
k3pler
Network connection blocker and packet analyzer
Security Android -
KeePassVault
Client app for KeePass databases
Security Android -
kernel-gaze-agent
2026 Ultimate Podman AI Coding Agent – Zero-Trace, MIT Licensed GitHub Repo
-
KeyPass
Offline, Secure, Private
Security Android -
Knock on Ports
A powerful client to manage and run port knocking sequences
Security Android -
Krautschlüssel
Control Krautspace's door
Security Android -
KryptEY
Keyboard for secure E2EE communication through signal protocol in any messenger
Security Android -
KyuubiMask - Privacy First
Privacy-focused notification masking for screen sharing and presentations
Security Android -
libero
The open-source AI teammate for Slack. Self-hosted, credential-isolated, every tool call audited.
-
LineShield
Verify phone lines registered to your name in Mexico CRT portals
Security Android -
Link Clear
Strip tracking parameters from links. Offline, private, no permissions.
Security Android -
linkedin-easyapply-antidetection-bot
Automate LinkedIn Easy Apply with stealth browser techniques and AI-driven form filling to test anti-detection and security research methods.
-
loomdb
An agent-native database. Sessions are branches an agent can fork, merge, and rewind; every write records what it was derived from; and taint-and-recall tells you exactly what a poisoned input contaminated. Built on substrate.
-
lopper
measure dependency waste and attack surface before it ships
-
lovable-prompts
Lovable prompts: 101 free copy-paste prompts for Lovable AI, organized by category and growth channel, plus 4 build kits with tested Supabase RLS schemas and verification queries. The free library behind lovable-prompts.com.
-
Mauth
A Material You Two-factor Authentication app.
Security Android -
mcp_reverse_engineering
Analyze binaries with a sandboxed MCP tool that unifies reverse engineering utilities and adds filesystem isolation, timeouts, and input checks
-
mcp-krb-server
Kerberos/SPNEGO single sign-on for MCP servers in FreeIPA environments. Provisioning framework for Windows (via WSL), Linux and macOS development environments.
-
mcp-safeguard
🛡️ Automated security scanner for MCP (Model Context Protocol) servers — 52 rules for prompt injection, credential exposure, SSRF & tool poisoning. pip install mcp-safeguard
-
mcp-security-lab
Evidence-first security checks for Model Context Protocol (MCP) servers — a Claude for OSS Incubator project.
-
mcp-sentinel
🛡️ Secure MCP server that lets AI cloud services (Claude, ChatGPT, Gemini, Cursor) remotely control Linux servers. HTTP/SSE transport · API key + JWT auth · IP whitelist · 20 tools · role-based access · audit logs.
-
MCPScan
Scan and identify security issues in MCP servers to help strengthen defenses against potential attacks on AI agent connections.
-
MemoryGuardian
Take Control of Your Clipboard
Security Android -
meshmcp
The identity-native control plane for agent↔tool (MCP) traffic. Every MCP server runs on a private WireGuard mesh — zero open ports — behind an agent firewall: tamper-evident signed audit, policy learned from behavior, identity-gated secrets, and audited cross-org federation. One static Go binary.
-
MetaPurge
Locally strip sensitive EXIF/metadata from your photos.
Security Android -
Mooltifill
Use the Android Autofill service with the Mooltipass BLE hardware authenticator
Security Android -
Motion Eye
Stream and connect all of your Surveillance network cameras
Security Android -
Motion-UI
A web interface to manage your own NVR with motion.
-
MotionLock
Keeps your device locked
Security Android -
mOTP
One-time password generator
Security Android -
My Wifi Passwords
View your Wi-Fi Passwords
Security Android -
NC Passwords
A password manager app for Nextcloud's Passwords app
Security Android -
nenya
A lightweight, highly secure AI API Gateway/Proxy written in Go. Acts as transparent middleware between local AI coding clients (OpenCode/Pi/Cursor) and upstream LLM providers (Gemini, DeepSeek, Zhipu z.ai).
-
NewPass
Securely store and manage passwords of your digital realm with NewPass.
Security Android -
Nextcloud Passwords
Secure app for viewing passwords for the Nextcloud Passwords app
Security Android -
niro
Security that keeps up with your developers.
-
noai-watermark
Remove invisible AI watermarks and manage metadata from images generated by popular AI models like DALL-E, Midjourney, and Stable Diffusion.
-
Note Crypt Pro
Keep your notes safe and secure
-
npm-safe
本地优先的 npm 包供应链安全扫描引擎：静态与 LLM 分析、CLI、桌面 GUI、CI 集成。
-
nuguard
AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.
-
Oblivion
Remote lock and wipe triggers for compromised or unattended devices.
Security Android -
obsidianvault
Encrypt and share files with zero-knowledge, browser-based AES-256-GCM transfer that keeps keys in the URL fragment and data off the server
-
OcyShield-Framework
Audit Android systems with this modular framework for security testing, payload deployment, and session management.
-
Ojo RTSP IP Camera viewer
Ojo is a basic IP Camera surveillance wall.
Security Android -
OkcAgent
Make OpenKeychain available in your Termux shell
Security Android -
Olvid
Private messaging for everyone
-
open2share
Enable sharing files from every app (like WeChat)
Security Android -
openclaw-codex-agent
Implement a contract-first dev workflow that plans, runs, verifies, and fixes code tasks for reproducible, auditable, and verifiable development.
-
opencode-gitlab-auth
GitLab OAuth authentication plugin for OpenCode
-
OpenDNS Updater
OpenDNS Updater is an extremely easy to use android app to perform IP updates.
Security Android -
opsentry
OpSight AgentGuard — Security guardrails for AI coding assistants. Three-layer enforcement for Claude Code.
-
Orion
A backend and automation language compiled to bytecode in Rust. One binary, 58 built-in modules, no runtime to install.
-
OTG Master
Mount VeraCrypt-encrypted USB drives on non-rooted Android
Security Android -
OUI Lookup and Database
Find a device's manufacturer by its MAC address and browse OUIs assignments
-
ovecc
CLI-first, deterministic architecture intelligence. Builds an offline model of your repo to answer impact, cycles, dead code, duplication and security, and enforces your architecture as a contract in CI. No LLM in the loop; usable by coding agents over MCP.
-
Password Monitor
Ensure your password safety by scanning for potential breaches.
Security Android -
Password Store
Manage your passwords
Security Android -
Password Store (Passkey Edition)
Manage your passwords
Security Android -
Passwords
Local Material 3 Password Manager.
Security Android -
patient-zero
Supply-chain attack scanner for the agent era. Triage in 30s with `npx patient-zero`, block malicious installs before postinstall runs, or drop into CI as a GitHub Action. Covers npm + Python + MCP agent configs. Free, MIT, no signup, no telemetry.
-
PayNoWay
Bitcoin wallet app made to test payment systems against double-spend attacks.
-
pentest-mcp-server
Integrate penetration testing tools and payloads into your workflow through the Model Context Protocol using STDIO or HTTP.
-
Permissions Manager
Warns user about dangerous permissions given to installed apps
-
Photok
Private Photo Vault, Hide Photos & Videos.
Security Android -
Pile
Organize your documents with tags. Private, offline, and built for you.
Security Android -
PINcredible - Secure PIN vault
Modern and secure Android app to help you remember any PIN
Security Android -
pinprick
Pin your GitHub Actions. Prick holes in their supply chain security.
-
PluckLockEx
Lock your phone when snatched
Security Android -
Port Authority
Port scanner
Security Android -
Port Knocker
Port knocker client; supports one time sequences
Security Android -
Port Knocker
Port Knocker Client
Security Android -
Privacy Flip
Manage your device privacy based on lock/unlock state
Security Android -
Privacy Indicators
Get notified every time an app or a service uses camera or microphone
Security Android -
PrivacyBreacher
showcase privacy issues in Android
Security Android -
PrivacyScanner
scan installed apps and highlight privacy risks by analyzing their permission
Security Android -
Privamatic
Privacy score for your Android — 45+ checks, no cloud, no tracking.
Security Android -
Private Lock
Lock your phone from its movement force
Security Android -
project-R-score
A comprehensive development ecosystem featuring enterprise-grade tools, automation frameworks, and performance optimization utilities built with Bun and TypeScript.
-
ProtectedWorkProfile
Profile owner Android security app.
Security Android -
PSPAchievementsSystem
Bring offline PSP achievements to real hardware with real-time RAM checks, in-game popups, and saved progress.
-
purrsh3ll
AI-powered terminal environment for penetration testers
-
Pushie
Provides temporary, secure, password sharing
Security Android -
pypi-security-best-practices
Secure your Python supply chain with this curated list of best practices for safe package installation, vulnerability scanning, and dependency management.
-
QQgroup-annual-report-analyzer
📊 Analyze QQ group chat records to create stunning annual reports with customizable features and AI integration for enhanced insights.
-
Quad9 Connect
Android application for Quad9 recursive DNS cybersecurity and privacy services
Security Android -
QuickSE
QuickSE lets rooted Android users view and change SELinux mode easily.
Security Android -
quodeq
AI-powered code quality and security scanner. Open source, MIT, runs locally. <🧭>
-
Qwen3.5-TurboQuant-MLX-LM
Accelerate Qwen3.5 KVCache with TurboQuant MLX-LM tools for prompt caching, quantized attention, and research-ready evals
-
rails-senior-architect
Ultimate Rails CTO Toolkit 2026: Pro Opinionated Skills for Modern Apps
-
rehype-harden
A security-focused rehype plugin that filters URLs based on allowed prefixes
-
repopilot
Local-first CLI for reviewing Git changes, security boundaries, and blast radius before merge.
-
rever-browser
AI agent browser for web reverse engineering
-
Rivia
Rivia is the ultimate encryption tool
Security Android -
RKNHardering
Detects VPN and proxy usage on Android using RKN methodology
Security Android -
Router Keygen YoloSec
Generate default WPA/WEP keys
Security Android -
Ruam Mij
Suspicious app scanner with privacy respects
Security Android -
runbookproof
Continuously verify commands in documentation, runbooks, and AI-generated instructions.
-
Safe Space
A safe space for your digital valuables.
-
Salasana
Generates site-specific unique passwords
Security Android -
Salty
A secure, offline-first message encryption tool for Android.
Security Android -
SassyMCP
One MCP server, 270 tools, replaces 75+ — files, shell, GitHub, Android, desktop vision, security & forensics, persistent memory. Smart context-saving tool loading, safe-delete guardrails, and an orphan-proof self-healing process supervisor. Works with Claude Desktop, Cursor, Windsurf, and any MCP client.
-
sbomhub
日本市場向けオープンソースSBOM管理ダッシュボード / Open-source SBOM management dashboard with NVD/JVN vulnerability correlation, Japanese UI, and METI guidelines compliance
Security Go -
sdk-ts
Official JavaScript and TypeScript SDK for the platform, offering a modern, type-safe client with flexible configuration and seamless API integration.
-
Secret Space Encryptor (SSE)
File Encryption, Text Encryption (Messages, Notes, …), Secure Password Manager
-
Secur: Cross-platform 2FA client
A beautiful, cross-platform 2FA TOTP client written in Flutter
-
Secure photo viewer
A media-viewer that functions ontop of your lockscreen
Security Android -
Secure QR Share
Share passwords and links securely via encrypted QR codes.
Security Android -
Secure-Agent-Launcher
Block AI agent access to sensitive macOS paths and log all actions to protect private data during command execution.
-
SecureOTP - Universal OTP Extractor
Auto-detect and copy OTP codes from SMS, Email, and app notifications
Security Android -
SecureScreen
Protect selected apps from screenshots and screen recording
Security Android -
SecureYourChats
Text & File Encryption/Decryption with new OverlayTechnology
-
security-framework
Security.framework bindings for macOS and iOS
-
security-framework-sys
Apple `Security.framework` low-level FFI bindings
Security Rust -
security-harness-kit
A Rust CLI that scans for secrets, PII, and sensitive data — with native hooks for AI coding assistants to prevent leaking credentials into AI context.
-
security-playbooks
Explore open-source ATT&CK scenarios, detection rules, and blue-team labs for hands-on security testing
-
SeekPrivacy
Activist-Grade Defense Against System-Level Data Surveillance
-
SELinuxModeChanger
Set SELinux mode on boot
Security Android -
sensitive-canary
Claude Code hooks that guard secrets and PII before they reach the Anthropic API
-
Sentinel Lens
Facial recognition surveillance with alerts
Security Android -
Sentris
No-Code Security Automation. Turn messy scripts into reliable, observable systems with drag & drop Visual Workflow Builder with agent driven collaberation.
-
Sentry
Enforce security policies
Security Android -
server
The self-hosted backend service for the platform, exposing REST and WebSocket interfaces to support document processing, external integrations, and data management. Requires PostgreSQL and NATS.
-
SharedHaven
Bitcoin wallet with secure multisig features
-
Sidestep
Intercept URLs, remove tracking, and redirect to privacy-friendly frontends.
Security Android -
Signet
Verify calls from family, colleagues, sources against deepfake impersonation.
Security Android -
Simple Text Crypt
Encrypts plain text using AES256
Security Android -
Skewy - anti eavesdropping
A tool to prevent eavesdropping and ultrasonic access of your smart phone.
Security Android -
SLMarena
SLMArena is a self-hosted benchmarking & red-teaming platform for local SLMs. Measure TTFT, tok/s, & latency while an automated frontier LLM judge evaluates accuracy, grammar, & prompt injection resilience in real time.
-
SmartFind
Find your phone with an SMS from a trusted contact
Security Android -
SnapPipe
Identity-based QUIC transport toolkit with signed tickets, self-hosted relay scaffolding, and zero-vendor open-core lock-in.
-
SnapSafe
Snap pics of anything, safely.
Security Android -
snitch
Single static-binary recon orchestrator in Go: chains subfinder, httpx, nmap, nuclei, ffuf, katana + injection testing (dalfox/crlfuzz/sqlmap), with dedup, diff-based webhook alerts, an interactive TUI and JSON/CSV/SARIF export.
-
SNR-Edit
📊 Enhance flow-based editing with SNR-Edit, a tool for structure-aware noise rectification that eliminates the need for inversion.
Security iOS -
sober-coding
Analyze AI-generated code to find technical debt and get actionable fixes.
-
sockguard
Docker socket proxy. Filter API requests by method and path with default-deny posture, structured audit logging, and Tecnativa drop-in compatibility.
Security Go -
solhint
Solidity Code Linter
-
solo-saas-field-manual
📘 Ship and operate your solo SaaS with practical docs, checklists, and playbooks to handle real-world challenges effectively.
-
SOS Alerter
Privacy-focused emergency app with SMS location tracking and silent recording.
Security Android -
Spectre
Radio frequency scanner with recon and offensive capabilities
Security Android -
SQRL Login
An implementation for SQRL (Secure Quick Reliable Login)
-
ssh-mcp-pro
TypeScript MCP server for controlled SSH operations, remote host workflows, command execution guardrails, and infrastructure automation.
-
SshDaemon
Simple ssh/sftp server without root.
Security Android -
starmetal
High-performance, self-hosted multi-language package registry and registry proxy
Security Rust -
StartFlagExploit
Affected Android versions: Android 10 / Android 11
Security Android -
strongSwan VPN Client
An easy to use IKEv2/IPsec-based VPN client.
Security Android -
svelte-vitals
A static code-health checker for SvelteKit — SEO, Performance, Correctness, Security, and Architecture, from source. Not a runtime Web Vitals reporter.
-
sycophant
The zero-trust framework for autonomous AI agents.
-
synentra
Intent‑aware governance gateway for autonomous AI agents that interact with enterprise APIs.
-
tankpkg-skill-vault
Secure AI Agent Skill Manager 2026 – Tamper-Proof Package Engine for Tank
-
TapLock
Lock your screen instantly with a double tap.
Security Android -
targate
AI-assisted pre-install security gate for npm packages — analyze, decide, and gate a dependency before it runs.
-
TAutoPentest
🔍 Automate security assessments with TAuto Pentest, an AI-driven tool that combines Nmap scanning for thorough penetration testing and analysis.
-
temp-os
🚀 Simplify Fedora installations with temp-os, an experimental template for rebasing to the latest atomic images seamlessly.
-
TenancyJS
Fail-closed, TypeScript-first multi-tenancy for Node.js - one tenant-isolation contract across Express, Next.js, AdonisJS & NestJS with Prisma, Knex, Lucid, TypeORM, Sequelize & Mongoose.
-
tenant-isolation-postgres
Multi-tenant isolation in PostgreSQL: RLS row scope + a privileged-column trigger that closes the gap RLS cannot express + security-definer metering. 15 integration tests execute the attacks and assert they fail.
-
TGS-2025056362---Pearson-Vue-Certified-IT-Specialist---Cloud-Computing
10 hands-on Pearson VUE IT Specialist Cloud Computing labs covering cloud concepts, service models, deployment models, shared responsibility, compute, storage, networking, IAM, security, cost, monitoring, availability, DR, migration planning, and certification readiness.
-
themis
Audits a Debian or Ubuntu host, fixes what it finds, and keeps it fixed: check, plan, apply, rollback. Written in Go.
-
themoltnet
Accountable authority for autonomous agents
-
thesmos-governance
AI governance CLI, GitHub Action, VS Code extension & MCP server — 1,075 rules for Claude, Cursor, Copilot, Gemini, Codex.
-
TinyKeePass
Another simple read-only KeePass app
Security Android -
tiyi
Single-binary WAF platform with Caddy, Coraza, OWASP CRS, CLI, Web UI, SQLite state, and signed releases. The WAF that grows with you.
-
Tokn - MFA / 2FA authenticator
Open-source 2FA authenticator. Encrypted on-device. No accounts.
Security Android -
tool-gates
Intelligent tool permission gate & security hooks for AI assistants (Claude Code, Codex, Antigravity; Gemini deprecated). Features AST shell gating, file guards, and safety scanners.
-
TorServices (alpha)
The simplest, fastest, smallest Tor proxy app (early test release)
Security Android -
TrashDroid
Automate comprehensive Android app security testing with TrashDroid using adb, drozer, and apktool for a full nine-phase dynamic analysis.
-
triagekit
Backend-free repo triage in one self-contained HTML file — GitHub Dependabot alerts, code scanning, PRs & issues, scored and tiered. No server, no CDN; your token stays in the browser.
-
Trigger
Open doors via Wi-Fi using HTTPS/SSH.
Security Android -
TripStar
Plan and manage trips using AI agents that create detailed itineraries, maps, budgets, and real-time travel information in one platform.
-
trusca
Self-hosted, open-source SCA portal — vulnerability (CVE), license compliance, and SBOM management in one UI. Black Duck/Snyk-class capabilities, Apache-2.0.
-
trustabl-action
GitHub Action that runs trustabl — static reliability/safety analyzer for AI agent SDKs (Claude, OpenAI, Google ADK, MCP). Gates CI on risk + severity.
-
trustsight
AUR package update vetting tool. Run it before yay -Syu.
-
Truvark
A multi-vault file encryption app that respects your privacy.
-
ultrahtml
A 1.75kB library for enhancing `html`. `ultrahtml` has zero dependencies and is compatible with any JavaScript runtime.
-
Unpinched
Detect PinchTab deployments and browser bridge artifacts with a fast, point-in-time scanner for security and forensic analysis.
-
User-controlled decryption operations
Emulates a smart card and lets you control the decryption operations
Security Android -
Valentin's PowerTools #002 - Passwords to remember
Generates human speakable and readable passwords
Security Android -
Valv
An encrypted gallery vault for Android devices
-
Vault
Simple, secure and fast password manager compatible with KeePass
Security Android -
Vernet - Network Analyzer
Host and Port scanner. Ping IP or domain.
Security Android -
vigil-tui
Monitor real-time power consumption, thermals, and clock speeds for CPU, GPU, and RAM directly in your terminal.
-
VoiceGuard
🔒 Enhance security with VoiceGuard, an AI-driven voice authentication system powered by OpenAI’s ChatGPT and Whisper for reliable voice identification.
-
Wasted
Lock a device and wipe its data on emergency
Security Android -
Watt
Disable or enable components(receivers/services/activities) easily
Security Android -
waveshare-watch-rs
Run Rust no_std firmware on the Waveshare ESP32-S3-Touch-AMOLED with this complete replacement for ESP-IDF and LVGL, featuring custom drivers and Embassy support.
-
webscan
Automated CLI security auditor for web configuration vulnerabilities.
-
WG Auto Connect
Auto connect to a WireGuard tunnel
Security Android -
WiFi Password Manager
Simple app using Shizuku or root access to manage WiFi passwords
Security Android -
WiFiScanner
Analyse the WiFi networks in range.
Security Android -
WinNT-add-system-user-injector
A C# tool for creating local Windows user accounts with secure random passwords, automatic group assignment, and improved DirectoryServices handling. Designed for system administrators, automation tasks.
-
WireMCP-rs
Provide high-speed real-time packet capture and network analysis with Rust-powered parsing and threat detection for efficient MCP server use.
Security Rust -
xQuakShell
Portable, secure remote-access platform extensible via sandboxed out-of-process plugins. Encrypted vault, strict host-key verification, capability-gated IPC. Built with Go + Wails.
-
Xray
Xray GUI Client For Android
Security Android -
Yana-AI
Personal Agent OS. Deterministic runtime guardrails for AI agents with hooks, policy engine, audit logs, and multi-agent orchestration. Apache 2.0 License
-
ylq-box
Practical notes on AI agents, architecture, security, and operations.
-
YubiClip XOR
Present static passwords over NFC securely from your NFC enabled Yubikey.
Security Android -
ZugaShield
7-layer AI agent security system — stop prompt injection, data exfiltration, and AI-specific attacks in under 15ms. Zero dependencies.
-
zzyCaptcha
🛡️ Generate secure, animated GIF CAPTCHAs with zzyCaptcha, a self-hostable service designed for easy integration and effective bot protection.
Security Python -
GitHub-Cyber-Scanner-Pro