Search Results for "security"
Sort By:
Showing 54 open source projects for "security"
View related business solutions-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
Paessler - Monitor Your Whole Network in MinutesWaiting weeks for a monitoring rollout isn't an option when infrastructure doesn't stop running. PRTG's auto-discovery scans your network and suggests from over 200 pre-configured sensor types, so you're watching servers, applications and devices within minutes, not after a multi-week deployment. Enterprise-strength monitoring, without the enterprise complexity. Start your free trial today.
-
1
Codex Security
SDKs and CLI for Codex Security
Codex Security is an OpenAI command-line tool and TypeScript SDK for discovering, validating, and fixing vulnerabilities in source code. It can scan an entire repository, review code changes, and preserve findings across repeated security assessments. Developers can run it interactively from a terminal or embed it in automated CI workflows. Authentication supports ChatGPT sign-in for local use and API keys for noninteractive environments. -
2
Prowler
An open source security tool to perform AWS security assessment
Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening, and forensics readiness. It contains more than 200 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks. Prowler is a command-line tool that helps you with AWS security assessment, auditing, hardening, and incident response. -
3
cargo-crev
A cryptographically verifiable code review system for the cargo
...Build a web of trust of other reputable users to help verify the code you use. Static binaries are available from the releases page. Crev is a system for verifying the security and reliability of dependencies based on collaborative code reviews. Crev users review the source code of packages/libraries/crates and share their findings with others. Crev then uses Web of Trust to select trusted reviews and judge the reputation of projects' dependencies. -
4
Destructive Command Guard
The Destructive Command Guard (dcg) is for blocking dangerous git
...It intercepts shell commands before execution and blocks operations that could erase files, rewrite Git history, destroy infrastructure, or remove data. The Rust implementation uses fast filtering and context-aware rules to distinguish dangerous execution from harmless text matches. Its modular security packs cover Git, filesystems, databases, containers, cloud platforms, Kubernetes, Terraform, and other tools. Users can inspect denials, enable agent-specific profiles, add allowlist entries, or temporarily bypass a rule when necessary. It also provides scan modes for CI and pre-commit checks, while a fail-open design avoids stopping work because of parser errors or timeouts. -
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
5
dirsearch
Web path scanner
An advanced command-line tool designed to brute force directories and files in webservers, AKA web path scanner. Wordlist is a text file, each line is a path. About extensions, unlike other tools, dirsearch only replaces the %EXT% keyword with extensions from -e flag. For wordlists without %EXT% (like SecLists), -f | --force-extensions switch is required to append extensions to every word in wordlist, as well as the /. To use multiple wordlists, you can separate your wordlists with commas.... -
6
aws-encryption-sdk-cli
CLI wrapper around aws-encryption-sdk-python
This command line tool can be used to encrypt and decrypt files and directories using the AWS Encryption SDK. If you have not already installed cryptography, you might need to install additional prerequisites as detailed in the cryptography installation guide for your operating system. Installation using a python virtual environment is recommended to avoid conflicts between system packages and user-installed packages. For the most part, the behavior of aws-encryption-cli in handling files is... -
7
NextDNS
NextDNS CLI client (DoH Proxy)
NextDNS protects you from all kinds of security threats, blocks ads and trackers on websites and in apps and provides a safe and supervised Internet for kids, on all devices and on all networks. Determine your threat model and fine-tune your security strategy by enabling 10+ different types of protections. Use the most trusted threat intelligence feeds containing millions of malicious domains, all updated in real-time. -
8
CFSSL
Cloudflare's PKI and TLS toolkit
CFSSL is CloudFlare's PKI/TLS swiss army knife. It is both a command line tool and an HTTP API server for signing, verifying, and bundling TLS certificates. It requires Go 1.12+ to build. Note that certain linux distributions have certain algorithms removed (RHEL-based distributions in particular), so the golang from the official repositories will not work. Users of these distributions should install go manually to install CFSSL. You can set the GOOS and GOARCH environment variables to have... -
9
Google Apps Manager
Command line management for Google G Suite
Google Apps Manager or GAM is a free and open source command line tool for Google G Suite Administrators that allows them to manage many aspects of their Google Apps Account quickly and easily. With GAM you can create and manage users, groups and domains; manage email, security and calendar settings; manage admins and organizations and many more. To use GAM Google Apps Business, Education, Partner or Government Edition is required. -
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
10
testssl.sh
Testing TLS/SSL encryption anywhere on any port
testssl.sh is a free command-line tool that checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as recent cryptographic flaws and more. testssl.sh is free and open-source software. You can use it under the terms of GPLv2, please review the License before using it. Works for Linux, Mac OSX, FreeBSD, NetBSD and WSL/MSYS2/Cygwin out of the box, no need to install or configure something, no gems, CPAN, pip or the like. OpenBSD only needs bash to be... -
11
terminal-notifier
Send User Notifications on macOS from the command-line
terminal-notifier is a command-line tool to send macOS User Notifications, which are available on macOS 10.10 and higher. alerter features were merged in terminal-notifier 1.7. This led to some issues and even more issues in the 1.8 release. From now on terminal-notifier won't have the sticky notification feature nor the actions buttons. If you need them please use alerter. Sticking to two smaller specialized tools will hopefully make them easier to maintain and less error prone. It is... -
12
ggshield
Detect and validate 500+ types of hardcoded secrets
GitGuardian’s ggshield is an open-source command-line interface (CLI) tool designed to help developers and security teams detect hardcoded secrets and sensitive credentials early in the development process, either locally or in CI/CD pipelines. It scans source code, configuration files, commit history, and other artifacts to automatically detect hundreds of different secret types — such as API keys, tokens, and passwords — helping prevent accidental leaks before they reach version control or production environments. ggshield can be used interactively on a developer’s machine, integrated as a pre-commit or pre-push git hook, and run as part of automated build or merge workflows to enforce security policies consistently across teams. ... -
13
SSH for GitHub Actions
GitHub Actions for executing remote ssh commands
...It also supports proxy and jump host workflows, making it useful for more complex infrastructure environments. Developers can pass environment variables, run scripts from files, capture command output, and add security checks such as host fingerprint verification. -
14
agent-browser
Browser automation CLI for AI agents
agent-browser is a toolkit that embeds AI agent capabilities directly into the web browser, enabling agents to interact with web content, scripts, and user actions while maintaining security boundaries that respect user privacy and browser constraints. It effectively provides a sandbox where AI agents can read, scroll, click, and interpret pages in context, allowing them to automate workflows, answer questions about page content, or generate structured summaries directly from the user’s current tab. The project emphasizes standards and safety, defining interfaces that let agents access DOM data, interpret events, and generate actionable insights without exposing sensitive credential-level access or violating policy boundaries. ... -
15
Node.js CLI Apps Best Practices
The largest Node.js CLI Apps best practices list
...It organizes dozens of recommendations around command-line experience, distribution, interoperability, accessibility, testing, errors, development, analytics, versioning, and security. The guide emphasizes POSIX conventions, helpful prompts, structured output, predictable configuration, meaningful exit codes, and clean separation of stdout and stderr. It also discusses dependency size, shell completion, containerization, debugging, and cross-platform behavior. Each recommendation explains why the practice matters and often links to practical tools or example projects. ... -
16
react2shell-scanner
High Fidelity Detection Mechanism for RSC/Next.js RCE
react2shell-scanner is a security-oriented tool that bridges modern JavaScript (React) applications and shell scripting by auditing web front-ends for exposed interfaces that could be manipulated or controlled through command execution. It scans React codebases, identifies places where user input interacts with shell-executable contexts, and flags risky patterns that might lead to command injection, unvalidated arguments, or unsafe bindings between UI controls and underlying system actions. ... -
17
Capslock
Tool to remap Caps Lock key behavior on Windows systems
...Rather than detecting vulnerabilities, Capslock focuses on identifying capabilities — permissions implied by calls to sensitive or privileged standard library functions, such as file system access, networking, or process control. By following transitive call graphs, it classifies which security-sensitive operations each package can reach, giving developers visibility into what their dependencies are capable of doing. This helps apply the Principle of Least Privilege to Go software, guiding audits, supply chain reviews, and trust assessments. Capslock aims to make security posture analysis more proactive by surfacing capability-based risk signals before malicious or overly powerful code is introduced into production. -
18
Claude Code Templates
CLI tool for configuring and monitoring Claude Code
Claude Code Templates is a popular open-source CLI tool and template ecosystem designed to streamline how developers work with Anthropic’s Claude Code by providing a rich catalog of ready-to-use code templates, AI agents, custom commands, settings, hooks, and external integrations that can be installed interactively or via the command line. It lets you quickly scaffold domain-specific AI agents (like security auditors, performance optimizers, or database architects), fill in consistent project configurations, and embed automated workflows without reinventing the wheel for each new project. The templates and components are organized by workflow so teams can adopt best practices for testing, deployment, documentation, DevOps automation, and more, all powered by Claude’s agent SDK. ... -
19
Toolbx Linux
Tool for interactive command line environments on Linux
Toolbx is a tool for Linux, which allows the use of interactive command line environments for development and troubleshooting the host operating system, without having to install software on the host. It is built on top of Podman and other standard container technologies from OCI. Toolbx environments have seamless access to the user's home directory, the Wayland and X11 sockets, networking (including Avahi), removable devices (like USB sticks), systemd journal, SSH agent, D-Bus, limits, /dev... -
20
try
Inspect a command's effects before modifying your live system
...This makes it useful for experimenting with package installation, system changes, and other shell commands where users want a chance to review the outcome first. The project is careful not to position itself as a full security sandbox, since trusted commands can still make network calls and the tool is presented as a prototype rather than a complete isolation boundary. It supports multiple Linux distributions and can fall back to mergerfs or unionfs in environments where overlayfs on nested mounts does not work as expected. In practice, -
21
Platypus
Create native Mac applications from command line scripts
Platypus is a developer tool that creates native Mac applications from command line scripts such as shell scripts or Python, Perl, Ruby, Tcl, JavaScript, and PHP programs. This is done by wrapping the script in an application bundle along with a slim app binary that runs the script. Platypus makes it easy to share scripts and programs with people who are unfamiliar with the command line interface. Native, user-friendly applications can be created with a few clicks. It is very easy to create... -
22
ProxyCrypt
Encrypted volumes through command line
ProxyCrypt is a command line tool that creates encrypted volumes within a file or a hard drive. Encryption and decryption are made on the fly, allowing you to use encrypted volumes like normal ones. Designed for paranoids and advanced users, it is also fast, very lightweight, open source and easy to recompile. See the features below. It works as a "proxy" for the AIM driver or the ImDisk driver. AIM driver is included in the full package. See the documentation for more informations... -
23
kubeaudit
kubeaudit helps you audit your Kubernetes clusters
kubeaudit helps you audit your Kubernetes clusters against common security controls. -
24
MTKRoot
MTKroot 3 – Root Tool for MediaTek (MTK) Devices
MTKroot 3 is an open-source tool designed to simplify the process of obtaining root access on Android devices powered by MediaTek (MTK) chipsets. Developed with a focus on compatibility and ease of use, this tool provides advanced users and developers with the ability to unlock their device's full potential, enabling custom ROM installations, system-level modifications, and deeper control over the Android OS. -
25
Largest Generic Hash and HMAC Program
57 Hash Functions In One Program, plus each with HMAC or KMAC
FEHASHMAC is the largest collection of publicly known hash algorithms integrated into a command-line utility. FEHASHMAC contains a set of known test vectors and results for each algorithm such that the correct implementation for each hardware platform and compiler version can directly be verified. Currently 57 hash algorithms like sha1 sha224 sha256 sha384 sha512 and variants, sha3 and shake, all SHA3 finalists and blake3, md2 md4 md5 md6, rmd128 rmd160 rmd256 rmd320, whirl gost lash160...
