Search

Security Trust Report: [email protected] — 69/100 (B, standard). Maintainer risk, supply chain analysis from 8 security databases.

A secure, terminal-based tool for sharing self-destructing secrets using VaporKey.

QuarkDash - pure typescript hybrid cryptographic protocol that provides post-quantum security, high performance, and attack resistance.

Static analysis for AI infrastructure security in Terraform. Finds misconfigured SageMaker, Bedrock IAM, model artifact buckets, missing PrivateLink, and exposed vector databases before they deploy.

Comprehensive security toolkit for web applications - XSS protection, rate limiting, JWT, CSRF, and 60+ security features

Yuan'an (元安) — detects malicious patterns in AI skills (13 detector classes) and system security baselines (Windows/Linux); purely read-only, zero-dependency and disciplined. Triggers on security audit / skill security check / malicious detection / supply

Catch prompt injection attacks in text: a zero-dependency, extensible scanner for instruction override, role hijack/jailbreaks, data exfiltration, fake delimiters, indirect injection and encoded/obfuscated payloads

Detect trojan source attacks that employ unicode bidi attacks to inject malicious code

Prompt injection defense framework for AI tool-calling

Scrypted plugin for Eufy Security cameras with streaming support via eufy-security-ws server

Client-side defense for LLM API calls: PII redaction, response threat scanning, and hash-chained audit logs

Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.

Scan npm and PyPI packages for prompt injection payloads targeting AI coding assistants (Copilot, Claude Code, Cursor)

Post-quantum end-to-end encryption with ML-KEM-768. Seed phrase–based accounts. Auto-expiring messages. Offline-ready. Exportable encrypted messages. Tamper-proof threads with blockchain-like integrity. Quantum-resistant messaging.

CLI to test RAG endpoints for prompt injection vulnerabilities — npx pijack test <url>

Automated LLM red team framework -- test any model's safety with one command

Audit any Ollama server for the misconfiguration that leaks compute and models — a public API bound with no auth — and PROVE it live with an anonymous probe of /api/tags, /api/ps, /api/version and CORS reflection. Zero deps, no keys.

LangChain adapter for AgentKernel — intercepts tool calls with PolicyEngine

Deterministic CLI for Kubernetes Continuous Control Verification

URL/IP/Email defanging with Javascript