Tools

Web AI firewall utility which protects upstream resources from scraper bots.

Generates lightweight, embedded honeypot triggers called canary tokens for detecting unauthorized access.

Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs

A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes

tirreno is an open-source security framework. Event tracking, threat detection, and risk scoring for any application.

Complete, reliable, secure and zero-trust webapp based on zero-knowledge encryption to store your TOTP codes.

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

Enterprise-class Open Source LDAP server for Linux.

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

A framework for secure and scalable network traffic analysis - https://netcap.io

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Volatility 3.0 development

Super timeline all the things

Safety guardrails for ai coding agents and human terminal commands

Proxy server to bypass Cloudflare protection

Digital Forensics Artifact Repository

Local-first AWS security analyzer that discovers attack paths and generates remediations using graph theory.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Light LDAP implementation

A turnkey OAuth & authentication system, designed for both Cloudflare Workers and Node.js

The FLARE team's open-source tool to identify capabilities in executable files.

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

Web-based Traffic and Security Network Traffic Monitoring

open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.

HTTP(S)/WS(S)/TCP tunnels to localhost using only SSH (serveo/ngrok alternative)

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

Anonymously share files, browse and publish _freesites_ (web sites accessible only through Hyphanet) and chat on forums.