Search Results for "security software"
Sort By:
Showing 250 open source projects for "security software"
View related business solutions-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
1
Symfony Security Bundle
Integration of the Security component into the Symfony framework
Symfony Security Bundle is a powerful tool for adding authentication and authorization to Symfony applications. It provides mechanisms for managing user roles, password encryption, and access control. The bundle supports various authentication methods, including form login, HTTP basic auth, OAuth, and more. It also integrates with Symfony’s firewall and access control systems for secure application development. -
2
Personal Security Checklist
A compiled checklist of 300+ tips for protecting digital security
Personal Security Checklist is a comprehensive, plain-language checklist for improving personal digital security and privacy across devices, accounts, and everyday workflows. It’s organized so that complete beginners can make quick, high-impact changes, while advanced users can dig into deeper hardening steps. The guidance spans topics like passwords, 2FA, device encryption, browser hygiene, network safety, backups, and incident response planning. Each section breaks recommendations into... -
3
OWASP Find Security Bugs
The SpotBugs plugin for security audits of Java web applications
The SpotBugs plugin for security audits of Java web applications. Find Security Bugs is the SpotBugs plugin for security audits of Java web applications. It can detect 141 different vulnerability types with over 823 unique API signatures. Cover popular frameworks including Spring-MVC, Struts, Tapestry and many more. Plugins are available for Eclipse, IntelliJ / Android Studio and NetBeans. Command line integration is available with Ant and Maven. Can be used with systems such as Jenkins and... -
4
WebHackersWeapons
A collection of cool tools used by Web hackers
WebHackersWeapons is a community-maintained catalog of tools used for web application security research and testing. Rather than providing one scanner, it indexes a broad ecosystem of specialized open-source security utilities. The collection spans analysis, penetration testing, proxies, scanners, reconnaissance, reverse engineering, fuzzing, automation, and supporting utilities. Individual entries link to their original projects so researchers can evaluate tools according to a particular... -
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
5
MobileHackersWeapons
Collection of cool tools used by Mobile hackers
MobileHackersWeapons is a curated collection of tools for Android and iOS security analysis, testing, and reverse engineering. The catalog groups projects by purpose rather than bundling them into a single executable toolkit. Categories include application analysis, penetration testing, proxies, reverse engineering, scanners, monitoring, device utilities, NFC, Bluetooth, jailbreak research, and certificate-unpinning tools. Listed projects span many languages and include both desktop... -
6
Windows 11 Guide
Windows Security tools, Encryption, Nextcloud, Graphics, Gaming
Windows 11 Guide is a comprehensive, single-repository handbook for setting up and tuning a Windows 11 (and often Windows 10) desktop for real day-to-day use, covering everything from basic configuration to advanced development and gaming scenarios. It walks users through installing essential applications, configuring Windows security tools, setting up encryption and backups, and integrating productivity services like Nextcloud. The guide also dives into graphics and gaming optimizations,... -
7
age
A simple, modern and secure encryption tool (and Go library)
age is a security-oriented tool and library by Filo Sottile. age is a simple, modern, secure encryption utility (and Go library) that emphasizes minimal configuration and strong defaults. It provides small explicit keys, no complex options, and is designed for UNIX-style composability; you can pipe into it, integrate it into scripts, etc. It supports a clearly defined format and promotes interoperability across implementations (there are Rust, TypeScript, etc). The project is well-suited for... -
8
DevSecOps
Collection and Roadmap for everyone who wants DevSecOps
DevSecOps is a curated roadmap and resource collection for integrating security throughout the software development lifecycle. It explains the relationship between development, security, and operations before organizing resources around practical lifecycle stages. Sections cover design, development, build, testing, deployment, operation, and monitoring. The repository links to guidance on threat modeling, secure coding, SAST, DAST, penetration testing, hardening, runtime protection, and security analysis. ... -
9
GopenPGP V3
A high-level OpenPGP library
GopenPGP V3 is a high-level OpenPGP cryptographic library developed by ProtonMail that provides a user-friendly API for common encryption and signing operations in Go, abstracting the complexity of the underlying OpenPGP standards and golang crypto primitives. This library lets developers perform key generation, message encryption and decryption, digital signing, and signature verification with straightforward functions that hide much of the boilerplate and nuance typically required when... -
Earn up to 16% annual interest with Nexo.Generate interest, borrow against your crypto, and trade a range of cryptocurrencies — all in one platform. Geographic restrictions, eligibility, and terms apply.
-
10
Claude-Red
claude-red is a curated library of offensive security skills
Claude Red is a curated collection of offensive-security skill files for Claude's skill system. Each skill provides structured domain guidance for a specific area of authorized security testing or research. The library covers web applications, identity, Active Directory, wireless systems, cloud environments, mobile platforms, embedded devices, reconnaissance, exploit research, and fuzzing. Skills load on demand from conversational triggers instead of occupying context continuously. Users can... -
11
Quake3e
Improved Quake III Arena engine
Quake3e is a modernized fork of id Software’s Quake III Arena engine, tailored for mod developers and competitive players. It includes numerous technical improvements while preserving the core gameplay and mod compatibility of the original. Focused on performance, security, and extended modding capabilities, it has become a popular base for competitive tournaments and engine forks. With its updated rendering path and support for high refresh rates, Quake3e offers a slick and responsive... -
12
Infosec Reference
An Information Security Reference That Doesn't Suck
Infosec Reference is a curated knowledge base and resource repository for information security practitioners. It aggregates cheat sheets, tooling guides, protocol deep dives, incident response playbooks, and threat actor profiles—all organized under accessible categories (network, web, host, cryptography, auditing). The repo is built as a living wiki of sorts: practitioners contribute updates, expand sections, or refine explanations as the threat landscape evolves. Because security spans... -
13
Mtk Easy Su
Get bootless root access with few clicks.
This app set up bootless super user access, with Magisk and Mtk-su, on MediaTek Android devices. To facilitate those wishing to use the security breach Mtk-su by Diplomatic. If you are a more advanced user. I recommend using the mtk-su tool from the terminal, you will have more possibilities and control over the process. -
14
Impacket
A collection of Python classes for working with network protocols
Impacket is a collection of Python classes designed for working with network protocols. It was primarily created in the hopes of alleviating some of the hindrances associated with the implementation of networking protocols and stacks, and aims to speed up research and educational activities. It provides low-level programmatic access to packets, and the protocol implementation itself for some of the protocols, like SMB1-3 and MSRPC. It features several protocols, including Ethernet, IP, TCP,... -
15
Microsoft SEAL
Easy-to-use and powerful homomorphic encryption library
Microsoft SEAL is an open-source homomorphic encryption library that allows computations to be performed directly on encrypted data, with no need for any decryption. Developed by the Cryptography and Privacy Research group at Microsoft, it enables software engineers to build end-to-end encrypted data storage and computation services that never have to procure the customer's key. Microsoft SEAL is very easy to use, compile and run in many different environments. Homomorphic encryption is... -
16
Privilege-Escalation
This cheasheet is aimed at the CTF Players and Beginners
Privilege Escalation is a practical cybersecurity reference for learning how attackers gain higher permissions after obtaining initial access to a system. It is aimed at CTF players, penetration testers, and beginners studying post-exploitation techniques in controlled environments. The repository organizes material by common escalation vectors instead of presenting a single automated tool. Topics include sudo permissions, SUID binaries, kernel weaknesses, scheduled jobs, Linux capabilities,... -
17
OpenH264
Open Source H.264 Codec
Cisco has taken their H.264 implementation and open-sourced it under BSD license terms. Development and maintenance will be overseen by a board from the industry and the open-source community. Furthermore, we have provided a binary form suitable for inclusion in applications across a number of different operating systems and made this binary module available for download from the Internet. We will not pass on our MPEG-LA licensing costs for this module, and based on the current licensing... -
18
fosite
Extensible security first OAuth 2.0 and OpenID Connect SDK for Go
The security first OAuth2 & OpenID Connect framework for Go. Built simple, powerful, and extensible. This library implements peer-reviewed IETF RFC6749, counterfeits weaknesses covered in peer-reviewed IETF RFC6819 and countermeasures various database attack scenarios, keeping your application safe when that hacker penetrates or leaks your database. OpenID Connect is implemented according to OpenID Connect Core 1.0 incorporating errata set 1 and includes all flows: code, implicit, and... -
19
Google APIs Node.js Client
Google's supported Node.js client library
Google's supported Node.js client library for accessing Google APIs. Support for authorization and authentication with OAuth 2.0, API Keys and JWT (Service Tokens) is included. The full list of supported APIs can be found on the Google APIs Explorer. The API endpoints are automatically generated, so if the API is not in the list, it is currently not supported by this API client library. These client libraries are supported by Google. However, these libraries are considered complete and are... -
20
Retire.js
Scanner detecting the use of JavaScript libraries
There is a plethora of JavaScript libraries for use on the web and in node.js apps out there. This greatly simplifies, but we need to stay updated on security fixes. "Using Components with Known Vulnerabilities" is now a part of the OWASP Top 10 and insecure libraries can pose a huge risk for your web app. The goal of Retire.js is to help you detect the use of versions with known vulnerabilities. Scan a web app or node app for use of vulnerable JavaScript libraries and/or node modules.... -
21
Coraza
OWASP Coraza WAF is a golang modsecurity compatible firewall library
Coraza is an open-source, enterprise-grade, high-performance Web Application Firewall (WAF) ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set. Coraza is a drop-in alternative to replace the soon-to-be abandoned Trustwave ModSecurity Engine and supports industry-standard SecLang rule sets. Coraza runs the OWASP Core Rule Set (CRS) to protect your web applications from a wide range of... -
22
The Book of Secret Knowledge
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks
The Book of Secret Knowledge is a large curated knowledge base for developers, system administrators, security learners, and technical power users. It collects manuals, cheat sheets, command-line tricks, web tools, blogs, one-liners, configuration examples, and practical references in one organized repository. The project is not a traditional application, but a navigable technical library meant to save time when looking for useful tools or operational knowledge. Its content spans areas such... -
23
Copy Fail - CVE-2026-31431
epository that demonstrates and analyzes a Linux kernel vulnerability
Copy Fail - CVE-2026-31431 is a proof-of-concept repository that demonstrates and analyzes a specific Linux kernel vulnerability identified as CVE-2026-31431. The project provides experimental scripts and documentation to reproduce and study the exploit in controlled environments. It is designed for security researchers and engineers who want to understand the mechanics of the vulnerability. The repository includes tested configurations across multiple Linux distributions and kernel... -
24
Back-End Developer Interview Questions
A list of back-end related questions
Back-End Developer Interview Questions is a curated collection of discussion prompts for evaluating and learning about back-end software engineering. It favors open-ended conversations over questions with a single correct answer. Topics cover design patterns, code design, programming languages, algorithms, software architecture, microservices, security, and general engineering concepts. It also includes questions based on code snippets and unconventional problem-solving scenarios. ... -
25
BurpSuite for Pentester
This cheatsheet is built for the Bug Bounty Hunters
BurpSuite for Pentester is a structured learning repository for web application security testing with Burp Suite. It is designed for penetration testers, bug bounty researchers, and learners who want a practical reference for Burp's major capabilities. The collection explains how different tools fit into vulnerability discovery, request analysis, and testing workflows. Covered areas include Proxy, Repeater, Intruder, Scanner, Sequencer, Collaborator, and several popular extensions....
