| 10/08 | 9 |
Weighs the soul of connections using proof-of-work to protect resources from scraper bots.
|
| 10/06 | 9 |
Powerful tool for discovering, classifying, validating, and analyzing leaked credentials.
|
| 10/05 | 9 |
Community curated templates for the nuclei engine to identify security vulnerabilities in applications.
|
| 10/02 | 9 |
On-demand website intelligence dashboard that gathers network, security, and performance data to help analyze attack vectors and understand site technologies.
|
| 10/14 | 8 |
Comprehensive security scanner for vulnerabilities, misconfigurations, and secrets across various targets.
|
| 10/14 | 8 |
Privacy-first hybrid static-analysis tool for Python, TypeScript, and Go that detects dead code, secrets, and security vulnerabilities.
|
| 10/13 | 8 |
Cloud-native policy-as-code engine that scans infrastructure, containers, Kubernetes, cloud services, and code for vulnerabilities and misconfigurations.
|
| 10/13 | 8 |
Cloud-native graph-based query language for querying and discovering infrastructure assets across clouds, containers, and services.
|
| 10/09 | 8 |
Modern automation platform for security and IT engineers with YAML templates, no-code workflows, lookup tables, and case management.
|
| 10/09 | 8 |
Edge virtualization engine providing hardware-assisted virtualization and resource partitioning for on-premises edge devices.
|
| 10/08 | 8 |
AI-powered security platform that scans codebases for secrets, vulnerabilities, CVEs, and generates prioritized remediation plans.
|
| 10/08 | 8 |
Local read-only multi-chain meme candidate scanner with GMGN-backed HTTP API access and manual review workflow.
|
| 10/07 | 8 |
Enterprise-grade software supply chain security tool with real-time malicious package detection and policy as code support.
|
| 10/06 | 8 |
High-performance authorization engine for modeling and enforcing fine-grained access control inspired by Google Zanzibar.
|
| 10/06 | 8 |
Secret management platform for syncing secrets and configurations across teams and infrastructure while preventing leaks.
|
| 10/05 | 8 |
Kubernetes-native toolkit that continuously scans clusters and generates vulnerability, configuration, secrets, RBAC, compliance, and SBOM reports.
|
| 10/02 | 8 |
Vulnerability scanner for container images and filesystems.
|
| 10/14 | 7 |
Comprehensive security platform for managing and securing Kubernetes environments throughout the development and deployment lifecycle.
|
| 10/13 | 7 |
Rails-oriented HotCell sidecar isolates untrusted computation in an unprivileged container with strict resource limits and file-descriptor based RPC.
|
| 10/13 | 7 |
Kontext places local policy between AI agents and the tools they call, evaluating, enforcing, and recording authorization decisions before consequential actions run.
|
| 10/13 | 7 |
Counts and limits actions by key to protect against DDoS and brute force attacks.
|
| 10/12 | 7 |
Fast and tolerant XSS sanitizer for HTML, MathML, and SVG.
|
| 10/12 | 7 |
A garbage-collected programming language focused on compile-time and runtime security via encrypted bytecode.
|
| 10/12 | 7 |
GitHub Action that runs OpenSSF Scorecards to produce security results, badges, and optional published reporting for repositories.
|
| 10/11 | 7 |
Manage dotfiles across multiple diverse machines securely.
|
| 10/11 | 7 |
Fast, efficient osquery management server implementing the osquery remote API as a TLS endpoint.
|
| 10/11 | 7 |
A Go-based website screenshot utility that uses Chrome Headless to capture web pages from the command line with optional reporting and saved results.
|
| 10/10 | 7 |
Embeddable Go library or standalone auth server with plugin-based, composable authentication and extensible hooks.
|
| 10/08 | 7 |
CI/CD compliance scanner for GitLab pipelines
|
| 10/08 | 7 |
Canonical JavaScript/TypeScript SDK for the Socket.dev API, providing package scoring, quota management, batch lookups, and dependency analysis with built-in request handling.
|
| 10/08 | 7 |
Platform for managing, structuring, visualizing, and sharing cyber threat intelligence using a STIX2-based knowledge schema.
|
| 10/07 | 7 |
API for checking port availability on specified hostnames or IP addresses to assist network troubleshooting and firewall validation.
|
| 10/06 | 7 |
Securely share sensitive information with automatic expiration and deletion after a set number of views or duration.
|
| 10/06 | 7 |
Middleware for limiting repeated requests to public APIs and endpoints.
|
| 10/03 | 7 |
Desktop proxy enabling scalable tool discovery, major token savings, and quarantine of malicious upstream servers for AI agents.
|
| 10/01 | 7 |
Software to manage, store, and distribute sensitive data like secrets, certificates, and keys.
|
| 10/14 | 6 |
Ruby gem providing git-managed LDAP group configuration and access provisioning for identity and access management.
|
| 10/14 | 6 |
Proxy that secures and simplifies access to infrastructure with outbound-only connections and integrated SSO.
|
| 10/14 | 6 |
Common code library shared by Sigstore infrastructure and Go clients providing signing interfaces and OpenID Connect support.
|
| 10/13 | 6 |
Static analysis tool for GitHub Workflows that evaluates rule expressions at workflow, job, and step depth to flag unsafe patterns.
|
| 10/10 | 6 |
JSON.parse() drop-in replacement that protects against prototype poisoning via __proto__ and constructor.prototype keys.
|
| 10/09 | 6 |
High-level Go packages providing APIs for interacting with TPM 2.0 devices.
|
| 10/08 | 6 |
Platform for engineering teams to secure, manage, and deploy application secrets across environments.
|
| 10/08 | 6 |
Scans and monitors projects for security vulnerabilities in code, containers, dependencies, and infrastructure-as-code.
|
| 10/06 | 6 |
End-to-end field-level encryption for TypeScript apps with zero-knowledge key management and searchable encrypted queries.
|
| 10/06 | 6 |
Autonomous AI pentesting platform that runs an end-to-end methodology and uses independent re-exploitation to verify and prove vulnerabilities.
|
| 10/01 | 6 |
Enterprise-ready SIEM and XDR platform offering real-time log correlation, threat intelligence, and incident response.
|
| 10/13 | 5 |
DNStwist-based MCP server providing domain permutation fuzzing and analysis, including DNS record checks, registration status, and optional web banner and phishing hashing.
|
| 10/12 | 5 |
Periodic Kubernetes API poller reporting containers, images, pods, nodes and namespaces currently in use.
|
| 10/07 | 5 |
Security-first personal AI assistant runtime providing multi-provider model access and multi-channel messaging integrations with local-first data control.
|
| 10/06 | 5 |
Windows-based, AI-powered all-in-one reverse engineering package manager for malware analysis, penetration testing, and education.
JavaScript
367☆
1291d old
#javascript
#security
#reverse-engineering
#penetration-testing
#awesome-list
|
| 10/04 | 5 |
JavaScript AST analysis tool for identifying potentially malicious code patterns.
|
| 10/10 | 3 |
Cybersecurity-focused domain-specific programming language with a dedicated virtual machine and IDE support.
|
| 10/06 | 3 |
Local-first EDR-style monitor tracking AI agent processes, file and network activity with per-agent risk scoring.
|
| 10/02 | 3 |
Best Practices Badge project that defines criteria and provides a BadgeApp web application for projects to self-certify compliance and display badges.
|
| 10/13 | 2 |
A network security appliance firmware and companion mobile and web apps for managing and monitoring home or small office networks.
|
| 10/02 | 1 |
Continuous cloud-assurance platform that evaluates cloud configurations for security and compliance against standards like C5 and CSA CCM.
|