Best Security & Hardening GitHub Repositories

A WiFi security auditing software

Free Windows, Mac and Linux cleaner, scanner, and more.

awesome game security [Welcome to PR]

Manages application of security headers with many safe defaults

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

edb is a cross-platform AArch32/x86/x86-64 debugger.

100+ installable Claude skills covering Engineering areas such as, ISO 26262 functional safety, ISO/SAE 21434 cybersecurity, ISO 21448 SOTIF, AIAG-VDA quality (APQP/PPAP/FMEA), Automotive SPICE, and continuous improvement tools — every builder paired with a confirmation reviewer.

Flutter Reverse Engineering Framework

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.

Cross-platform desktop GUI app to clean image metadata

A security-focused library OS supporting kernel- and user-mode execution

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

XERJ is the new way for AI to search data. Its autoindex capability activates agents to know your data without the token waste of grep and sed. One command indexes code, docs, logs and PDFs for search, RAG, security audits and agent memory, using 40x fewer tokens than grep. Elasticsearch compatible, so existing clients just work.

OAuth 2.0 social authentication providers for ASP.NET Core

Provides a tight integration of the Security component into the Symfony full-stack framework

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

ESLint rules for Node Security

Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐