Security middleware
-
@andersmyrmel/vard
Lightweight prompt injection detection for LLM applications. Zod-inspired chainable API for prompt security.
-
abtars
Agent harness connecting messaging platforms, with persistent memory, skills, scheduled tasks, self-healing supervision, and distributed multi-agent collaboration
-
action-pin-check
Audit GitHub Actions workflows for mutable or missing action pins.
-
ACYBER-Wayback-Machine-Downloader
📥 Download historical files from the Internet Archive Wayback Machine with our Python tool, supporting proxies, retries, and customizable settings.
-
Advanced PassGen
Generate passwords with ease.
Security Android -
Advanced PortChecker
Check if TCP ports are open.
Security Android -
Aer - Fork of Anemo
Private storage utility for android with support for external storage media
-
AFWall+
Control network traffic
Security Android -
agent-bom
AI supply-chain & cloud security scanner and self-hosted control plane — agents, MCP, packages, cloud estate, non-human identities, and LLM cost. SBOM/SARIF, graph attack-paths, runtime enforcement, and compliance evidence.
-
agent-egress-bench
Provide an open test corpus to assess and improve AI agent egress security through validated cases and automated workflows.
-
AirGuard - AirTag protection
AirGuard detects trackers that are used for stalking and warns you.
Security Android -
akmon
Tamper-evident evidence and verification layer for AI agents. Verify any agent's session offline with just openssl. No cloud, no lock-in.
-
AliasVault
Privacy-first Password Manager with Built-in Email Aliasing
Security Android -
Amber
Nostr event signer for Android
Security Android -
android-agent
Control Android devices through ADB with this Python automation framework for task execution and phone farm scaling.
-
App Lock
Secure your sensitive apps with powerful biometric protection using AppLock!
Security Android -
AppVerifier BG
Verify installed apps against shared signature hashes and databases.
Security Android -
atlas.compass
🔒 Securely manage passwords locally in the terminal with AES-256 encryption and zero-knowledge master key control using atlas.compass.
-
AttackMap
AI-assisted defensive security analysis for codebases.
-
Authnkey
Passkey credential provider for hardware security keys
Security Android -
Authorizer
Password Manager with USB Keyboard emulation
Security Android -
AutoPassCrack
🔑 Automate brute-forcing web login forms with ease. Enjoy flexible options like custom generation and advanced field detection for efficient password cracking.
-
AWSBestPracticesSkill
Unofficial source-linked AWS best practices for every AWS service, organized by Well-Architected pillar for Claude Code, OpenAI Codex, and AI coding agents.
-
Banana Split
Split secrets into QR-code shards using Shamir's Secret Sharing
Security Android -
because
🌟 Simplify decision-making with because, a lightweight tool that helps you weigh options clearly and efficiently.
-
BinderFuzzy - Pentest Android Services
An App intended for fuzzing the Binder interface and System Services of Android.
Security Android -
BLE Radar
A tool to monitor, analyze and find BLE devices around you.
Security Android -
Blink Comparison
Simplifies comparing photos of tamper-evident seals using your eyes
Security Android -
Bluecheese
Offline text encryption-fast, local, no trackers.
Security Android -
BlueGate
Android client to control bluegate BLE gate controller
Security Android -
BluePass
BluePass extracts 2FA tokens from SMS and forwards them via Bluetooth
Security Android -
bonklm
Enforce security guardrails for large language models in Node.js applications to manage risks and maintain safe usage across platforms and providers.
-
bv-mcp
Open-source DNS & email security scanner. One MCP endpoint, 57 checks, zero install. Cloudflare Workers.
-
CarVita
Personal assistant for managing and predicting your vehicle's maintenance needs.
Security Android -
Casbin
Authorization library supporting access-control models like ACL, RBAC, and ABAC.
-
cavra
CAVRA - Controlled Agentic Verification & Runtime Authority. Before the agent acts, CAVRA decides. CAVRA is a runtime governance and authority layer for AI coding agents.
-
Certance-Field
Cut your GitHub Copilot token bill, locally. Certance Field compresses oversized context before it reaches the model, redacts and scans for secrets, and exports audit evidence. No cloud, no external calls.
-
Citrine
Nostr relay for Android
Security Android -
claude-whatsapp
Connect your WhatsApp number to Claude Code to automate messages and manage conversations.
-
clauderabbit
ClaudeRabbit is a free, open-source security product protecting the open-source community from malware. We clone any public GitHub repo into an isolated sandbox, run it, and return one honest safety score.
-
clawseccheck
🦞 Free, local, read-only security self-audit for your own OpenClaw AI-agent setup. Scores it A–F, surfaces the urgent holes, emits copy-paste fixes. Zero deps, no network, no API key — your data never leaves your machine.
-
CleanSlate
Protect your data anywhere anytime
Security Android -
cloud-ai-security-skills
Cloud and AI security automation skills: OCSF-shaped evidence, detection engineering, audit, compliance, MCP workflows, and HITL-controlled operations.
-
Cryptographic ID
Attest the trustworthiness of a device using asymmetric cryptography
Security Android -
CryptoSafe
Offline AES-256-GCM text encryption with Argon2id
Security Android -
CryptX
Simple Android Cryptography Toolkit
Security Android -
Derandom
Pseudo random number predictor
Security Android -
Diceware Password Generator
Generate diceware passwords
Security Android -
Disabler
Disable any applications, and easily enable it with a pretty customisable launch
Security Android -
DissPair
Bluetooth security toolkit
Security Android -
dracon-utilities
Invisible infrastructure for Dracon developer workspaces: git sync, system guard, and warden encryption utilities.
-
Droid_SCEP
Get certificates from a SCEP server and monitor the expiration
Security Android -
DroidCrypt
A file and text encryption tool for Android
-
Dumpsys Packages Copycat
Provides a detailed summary of all installed packages
Security Android -
Duress
Duress password trigger
Security Android -
DuressKeyboardLite
Keyboard with DuressPassword feature.
Security Android -
e-Passport Reader
use the NFC chip to communicate with an electronic passport
Security Android -
Encrypt Text
Minimalistic application to encrypt plain text using AES 256.
Security Android -
End of Updates Checker
Check until when your phone gets updates.
Security Android -
entropy-chaos
Test APIs by generating custom attack scenarios using large language models to uncover logic flaws beyond standard scanners.
-
EphemeralWorkProfile
Profile owner Android privacy app.
Security Android -
escape-goat
Escape a string for use in HTML or the inverse
-
ESUP-NFC-TAG-DROID
ESUP-NFC-TAG-DROID works as a client of an ESUP-NFC-TAG server. Android 5 (or +)
Security Android -
etheram
🔧 Develop, compile, and deploy smart contracts effortlessly with the Etheram plugin for Atom, enhancing your Ethereum programming experience.
-
Fahrraddiebstahlwarnung
Bicycle thefts and accidents in Berlin
Security Android -
Fake Contacts
Create fake phone contacts, for data-poisoning.
Security Android -
Fauxx - Privacy Through Noise
Poison data collection profiles by generating decoy signals.
Security Android -
FMD edge
Locate and control your device remotely
Security Android -
forgeterm
Monitor AI coding agents in real-time to block unauthorized file access, network connections, and dangerous commands while enforcing system resource limits.
-
freebsd-industrial-edge-ai-secure-device
Demonstrate secure FreeBSD ARM64 edge AI devices that collect telemetry and run embedded AI with containerized data science and real-time ML pipelines.
-
genversion
A command line utility to read version from package.json and attach it into your module as a property
-
gh-safe-repo
Python CLI that creates GitHub repos with safe defaults — branch protection, Dependabot, secret scanning, and pre-flight security scanning — applied automatically.
-
github-command-center
Manage GitHub pull requests, issues, notifications, and local git tasks in one self-hosted app built with Go and React.
-
github-well-architected
Apply design thinking to build and ship your software securely and at scale with GitHub
Security TypeScript -
GPS Setter
A GPS setter based on the Xposed framework.
Security Android -
gradle-wrapper-validator
A validator for gradle/wrapper jar binaries, intended to be used in CI pipelines.
-
Guerrilla Mail
Quickly receive anonymous and temporary mails.
-
gurgl
Local-first egress hygiene for MCP servers: capture, diff, and allowlist what your AI-agent tools contact on the network.
-
Hash Droid
Verify file integrity
Security Android -
Haven
Isolate and run multiple instances of apps using Work Profiles
Security Android -
headscale-install
Install and configure a Headscale server on Linux with automated setup, user management, and verified binaries
-
HiddenProtectedWorkProfile
Hidden Profile owner Android security app.
Security Android -
Hypatia
A real-time malware scanner
Security Android -
Inter Profile Sharing
Easily share media and text between Android user profiles
Security Android -
IsPhoneEncrypted
Check if the disk is fully encrypted
Security Android -
IYPS - Is Your Password Secure?
Evaluate passwords, predict crack times, and get tips for stronger passwords.
Security Android -
k3pler
Network connection blocker and packet analyzer
Security Android -
KeePassVault
Client app for KeePass databases
Security Android -
KeyPass
Offline, Secure, Private
Security Android -
Knock on Ports
A powerful client to manage and run port knocking sequences
Security Android -
Krautschlüssel
Control Krautspace's door
Security Android -
KryptEY
Keyboard for secure E2EE communication through signal protocol in any messenger
Security Android -
KyuubiMask - Privacy First
Privacy-focused notification masking for screen sharing and presentations
Security Android -
LineShield
Verify phone lines registered to your name in Mexico CRT portals
Security Android -
linkedin-easyapply-antidetection-bot
Automate LinkedIn Easy Apply with stealth browser techniques and AI-driven form filling to test anti-detection and security research methods.
-
Mauth
A Material You Two-factor Authentication app.
Security Android -
mcp_reverse_engineering
Analyze binaries with a sandboxed MCP tool that unifies reverse engineering utilities and adds filesystem isolation, timeouts, and input checks
-
MCPScan
Scan and identify security issues in MCP servers to help strengthen defenses against potential attacks on AI agent connections.
-
MemoryGuardian
Take Control of Your Clipboard
Security Android -
MetaPurge
Locally strip sensitive EXIF/metadata from your photos.
Security Android -
Mooltifill
Use the Android Autofill service with the Mooltipass BLE hardware authenticator
Security Android -
Motion Eye
Stream and connect all of your Surveillance network cameras
Security Android -
Motion-UI
A web interface to manage your own NVR with motion.
-
MotionLock
Keeps your device locked
Security Android -
mOTP
One-time password generator
Security Android -
My Wifi Passwords
View your Wi-Fi Passwords
Security Android -
NC Passwords
A password manager app for Nextcloud's Passwords app
Security Android -
NewPass
Securely store and manage passwords of your digital realm with NewPass.
Security Android -
Nextcloud Passwords
Secure app for viewing passwords for the Nextcloud Passwords app
Security Android -
niro
Security that keeps up with your developers.
-
noai-watermark
Remove invisible AI watermarks and manage metadata from images generated by popular AI models like DALL-E, Midjourney, and Stable Diffusion.
-
Note Crypt Pro
Keep your notes safe and secure
-
Oblivion
Remote lock and wipe triggers for compromised or unattended devices.
Security Android -
OcyShield-Framework
Audit Android systems with this modular framework for security testing, payload deployment, and session management.
-
Ojo RTSP IP Camera viewer
Ojo is a basic IP Camera surveillance wall.
Security Android -
OkcAgent
Make OpenKeychain available in your Termux shell
Security Android -
Olvid
Private messaging for everyone
-
open2share
Enable sharing files from every app (like WeChat)
Security Android -
openclaw-codex-agent
Implement a contract-first dev workflow that plans, runs, verifies, and fixes code tasks for reproducible, auditable, and verifiable development.
-
opencode-gitlab-auth
GitLab OAuth authentication plugin for OpenCode
-
OpenDNS Updater
OpenDNS Updater is an extremely easy to use android app to perform IP updates.
Security Android -
OUI Lookup and Database
Find a device's manufacturer by its MAC address and browse OUIs assignments
-
Password Monitor
Ensure your password safety by scanning for potential breaches.
Security Android -
Password Store
Manage your passwords
Security Android -
Password Store (Passkey Edition)
Manage your passwords
Security Android -
Passwords
Local Material 3 Password Manager.
Security Android -
patient-zero
Supply-chain attack scanner for the agent era. Triage in 30s with `npx patient-zero`, block malicious installs before postinstall runs, or drop into CI as a GitHub Action. Covers npm + Python + MCP agent configs. Free, MIT, no signup, no telemetry.
-
PayNoWay
Bitcoin wallet app made to test payment systems against double-spend attacks.
-
pentest-mcp-server
Integrate penetration testing tools and payloads into your workflow through the Model Context Protocol using STDIO or HTTP.
-
Permissions Manager
Warns user about dangerous permissions given to installed apps
-
Photok
Private Photo Vault, Hide Photos & Videos.
Security Android -
PINcredible - Secure PIN vault
Modern and secure Android app to help you remember any PIN
Security Android -
pinprick
Pin your GitHub Actions. Prick holes in their supply chain security.
-
PluckLockEx
Lock your phone when snatched
Security Android -
Port Authority
Port scanner
Security Android -
Port Knocker
Port knocker client; supports one time sequences
Security Android -
Port Knocker
Port Knocker Client
Security Android -
Privacy Flip
Manage your device privacy based on lock/unlock state
Security Android -
Privacy Indicators
Get notified every time an app or a service uses camera or microphone
Security Android -
PrivacyBreacher
showcase privacy issues in Android
Security Android -
PrivacyScanner
scan installed apps and highlight privacy risks by analyzing their permission
Security Android -
Privamatic
Privacy score for your Android — 45+ checks, no cloud, no tracking.
Security Android -
Private Lock
Lock your phone from its movement force
Security Android -
ProtectedWorkProfile
Profile owner Android security app.
Security Android -
PSPAchievementsSystem
Bring offline PSP achievements to real hardware with real-time RAM checks, in-game popups, and saved progress.
-
purrsh3ll
AI-powered terminal environment for penetration testers
-
Pushie
Provides temporary, secure, password sharing
Security Android -
pypi-security-best-practices
Secure your Python supply chain with this curated list of best practices for safe package installation, vulnerability scanning, and dependency management.
-
QQgroup-annual-report-analyzer
📊 Analyze QQ group chat records to create stunning annual reports with customizable features and AI integration for enhanced insights.
-
Quad9 Connect
Android application for Quad9 recursive DNS cybersecurity and privacy services
Security Android -
QuickSE
QuickSE lets rooted Android users view and change SELinux mode easily.
Security Android -
quodeq
AI-powered code quality and security scanner. Open source, MIT, runs locally. <🧭>
-
rehype-harden
A security-focused rehype plugin that filters URLs based on allowed prefixes
-
repopilot
Local-first CLI for reviewing Git changes, security boundaries, and blast radius before merge.
-
Rivia
Rivia is the ultimate encryption tool
Security Android -
RKNHardering
Detects VPN and proxy usage on Android using RKN methodology
Security Android -
Router Keygen YoloSec
Generate default WPA/WEP keys
Security Android -
Ruam Mij
Suspicious app scanner with privacy respects
Security Android -
Safe Space
A safe space for your digital valuables.
-
Salasana
Generates site-specific unique passwords
Security Android -
sbomhub
日本市場向けオープンソースSBOM管理ダッシュボード / Open-source SBOM management dashboard with NVD/JVN vulnerability correlation, Japanese UI, and METI guidelines compliance
Security Go -
Secret Space Encryptor (SSE)
File Encryption, Text Encryption (Messages, Notes, …), Secure Password Manager
-
Secur: Cross-platform 2FA client
A beautiful, cross-platform 2FA TOTP client written in Flutter
-
Secure photo viewer
A media-viewer that functions ontop of your lockscreen
Security Android -
Secure QR Share
Share passwords and links securely via encrypted QR codes.
Security Android -
Secure-Agent-Launcher
Block AI agent access to sensitive macOS paths and log all actions to protect private data during command execution.
-
SecureOTP - Universal OTP Extractor
Auto-detect and copy OTP codes from SMS, Email, and app notifications
Security Android -
SecureScreen
Protect selected apps from screenshots and screen recording
Security Android -
SecureYourChats
Text & File Encryption/Decryption with new OverlayTechnology
-
security-framework
Security.framework bindings for macOS and iOS
-
security-framework-sys
Apple `Security.framework` low-level FFI bindings
Security Rust -
security-playbooks
Explore open-source ATT&CK scenarios, detection rules, and blue-team labs for hands-on security testing
-
SeekPrivacy
Activist-Grade Defense Against System-Level Data Surveillance
-
SELinuxModeChanger
Set SELinux mode on boot
Security Android -
Sentinel Lens
Facial recognition surveillance with alerts
Security Android -
Sentry
Enforce security policies
Security Android -
server
The self-hosted backend service for the platform, exposing REST and WebSocket interfaces to support document processing, external integrations, and data management. Requires PostgreSQL and NATS.
-
SharedHaven
Bitcoin wallet with secure multisig features
-
Sidestep
Intercept URLs, remove tracking, and redirect to privacy-friendly frontends.
Security Android -
Signet
Verify calls from family, colleagues, sources against deepfake impersonation.
Security Android -
Simple Text Crypt
Encrypts plain text using AES256
Security Android -
Skewy - anti eavesdropping
A tool to prevent eavesdropping and ultrasonic access of your smart phone.
Security Android -
SmartFind
Find your phone with an SMS from a trusted contact
Security Android -
SnapSafe
Snap pics of anything, safely.
Security Android -
snitch
Single static-binary recon orchestrator in Go: chains subfinder, httpx, nmap, nuclei, ffuf, katana + injection testing (dalfox/crlfuzz/sqlmap), with dedup, diff-based webhook alerts, an interactive TUI and JSON/CSV/SARIF export.
-
SNR-Edit
📊 Enhance flow-based editing with SNR-Edit, a tool for structure-aware noise rectification that eliminates the need for inversion.
Security iOS -
sober-coding
Analyze AI-generated code to find technical debt and get actionable fixes.
-
sockguard
Docker socket proxy. Filter API requests by method and path with default-deny posture, structured audit logging, and Tecnativa drop-in compatibility.
Security Go -
solhint
Solidity Code Linter
-
solo-saas-field-manual
📘 Ship and operate your solo SaaS with practical docs, checklists, and playbooks to handle real-world challenges effectively.
-
SOS Alerter
Privacy-focused emergency app with SMS location tracking and silent recording.
Security Android -
SQRL Login
An implementation for SQRL (Secure Quick Reliable Login)
-
ssh-mcp-pro
TypeScript MCP server for controlled SSH operations, remote host workflows, command execution guardrails, and infrastructure automation.
-
SshDaemon
Simple ssh/sftp server without root.
Security Android -
StartFlagExploit
Affected Android versions: Android 10 / Android 11
Security Android -
strongSwan VPN Client
An easy to use IKEv2/IPsec-based VPN client.
Security Android -
tankpkg-skill-vault
Secure AI Agent Skill Manager 2026 – Tamper-Proof Package Engine for Tank
-
TAutoPentest
🔍 Automate security assessments with TAuto Pentest, an AI-driven tool that combines Nmap scanning for thorough penetration testing and analysis.
-
temp-os
🚀 Simplify Fedora installations with temp-os, an experimental template for rebasing to the latest atomic images seamlessly.
-
TenancyJS
Fail-closed, TypeScript-first multi-tenancy for Node.js - one tenant-isolation contract across Express, Next.js, AdonisJS & NestJS with Prisma, Knex, Lucid, TypeORM, Sequelize & Mongoose.
-
TGS-2025056362---Pearson-Vue-Certified-IT-Specialist---Cloud-Computing
10 hands-on Pearson VUE IT Specialist Cloud Computing labs covering cloud concepts, service models, deployment models, shared responsibility, compute, storage, networking, IAM, security, cost, monitoring, availability, DR, migration planning, and certification readiness.
-
thesmos-governance
AI governance CLI, GitHub Action, VS Code extension & MCP server — 1,075 rules for Claude, Cursor, Copilot, Gemini, Codex.
-
TinyKeePass
Another simple read-only KeePass app
Security Android -
tiyi
Single-binary WAF platform with Caddy, Coraza, OWASP CRS, CLI, Web UI, SQLite state, and signed releases. The WAF that grows with you.
-
Tokn - MFA / 2FA authenticator
Open-source 2FA authenticator. Encrypted on-device. No accounts.
Security Android -
TorServices (alpha)
The simplest, fastest, smallest Tor proxy app (early test release)
Security Android -
TrashDroid
Automate comprehensive Android app security testing with TrashDroid using adb, drozer, and apktool for a full nine-phase dynamic analysis.
-
Trigger
Open doors via Wi-Fi using HTTPS/SSH.
Security Android -
TripStar
Plan and manage trips using AI agents that create detailed itineraries, maps, budgets, and real-time travel information in one platform.
-
trusca
Self-hosted, open-source SCA portal — vulnerability (CVE), license compliance, and SBOM management in one UI. Black Duck/Snyk-class capabilities, Apache-2.0.
-
trustabl-action
GitHub Action that runs trustabl — static reliability/safety analyzer for AI agent SDKs (Claude, OpenAI, Google ADK, MCP). Gates CI on risk + severity.
-
Truvark
A multi-vault file encryption app that respects your privacy.
-
ultrahtml
A 1.75kB library for enhancing `html`. `ultrahtml` has zero dependencies and is compatible with any JavaScript runtime.
-
Unpinched
Detect PinchTab deployments and browser bridge artifacts with a fast, point-in-time scanner for security and forensic analysis.
-
User-controlled decryption operations
Emulates a smart card and lets you control the decryption operations
Security Android -
Valentin's PowerTools #002 - Passwords to remember
Generates human speakable and readable passwords
Security Android -
Valv
An encrypted gallery vault for Android devices
-
Vault
Simple, secure and fast password manager compatible with KeePass
Security Android -
Vernet - Network Analyzer
Host and Port scanner. Ping IP or domain.
Security Android -
vigil-tui
Monitor real-time power consumption, thermals, and clock speeds for CPU, GPU, and RAM directly in your terminal.
-
VoiceGuard
🔒 Enhance security with VoiceGuard, an AI-driven voice authentication system powered by OpenAI’s ChatGPT and Whisper for reliable voice identification.
-
Wasted
Lock a device and wipe its data on emergency
Security Android -
Watt
Disable or enable components(receivers/services/activities) easily
Security Android -
waveshare-watch-rs
Run Rust no_std firmware on the Waveshare ESP32-S3-Touch-AMOLED with this complete replacement for ESP-IDF and LVGL, featuring custom drivers and Embassy support.
-
WG Auto Connect
Auto connect to a WireGuard tunnel
Security Android -
WiFi Password Manager
Simple app using Shizuku or root access to manage WiFi passwords
Security Android -
WiFiScanner
Analyse the WiFi networks in range.
Security Android -
WireMCP-rs
Provide high-speed real-time packet capture and network analysis with Rust-powered parsing and threat detection for efficient MCP server use.
Security Rust -
Xray
Xray GUI Client For Android
Security Android -
YubiClip XOR
Present static passwords over NFC securely from your NFC enabled Yubikey.
Security Android -
zzyCaptcha
🛡️ Generate secure, animated GIF CAPTCHAs with zzyCaptcha, a self-hostable service designed for easy integration and effective bot protection.
Security Python