Search

Audit your Node version for known CVEs and patches

Audit any Ollama server for the misconfiguration that leaks compute and models — a public API bound with no auth — and PROVE it live with an anonymous probe of /api/tags, /api/ps, /api/version and CORS reflection. Zero deps, no keys.

Deterministic CLI for Kubernetes Continuous Control Verification

Post-quantum end-to-end encryption with ML-KEM-768. Seed phrase–based accounts. Auto-expiring messages. Offline-ready. Exportable encrypted messages. Tamper-proof threads with blockchain-like integrity. Quantum-resistant messaging.

Deterministic secret detection and redaction for runtime data and AI context: scans text locally before it reaches logs, storage, telemetry, tools, or model context. CPython binding for the redact-secret core.

Easy to encrypt & decrypt everything (like passwords, kyc informations etc...)

Cloud Security Command Center API client for Node.js

BYOK-friendly input and output security utilities for AI applications

Claude Code plugin & marketplace for defensive backend security: audits, dependency/config scanning, secure-coding guidance, and a phased zero-to-hardened roadmap. OWASP Top 10 / ASVS anchored, benchmarked against NodeGoat.

Military-grade one-command security setup for Express.js applications

Angular service for encrypting, securely storing and retrieving app browser storage

Universal package security manager, network WAF, and API flow tester — intercepts installs across 14 ecosystems with CVE verification, reverse proxy WAF with TUI, and node-based API integration testing with security probes.

A drop-in but safer alternative to jsonwebtoken with modern security practices, TypeScript support, and enterprise features

KNX protocol implementation for Node.js, support KNX/IP Tunneling/Routing, KNX/IP Secure and Data Secure, FT1.2/KBerry TP plain KNXas well as full secure KNX stack. This is the ENGINE of Node-Red KNX-Ultimate node. Go check it!

A package for securing storage of web applications via encryption for localStorage, sessionStorage, cookies, and IndexedDB. It is customizable and easy to use, similar to default operations.

Cognitive Security Middleware - The 'Electronic Stability Program' (ESP) for Large Language Models. Bidirectional containment system with defense-in-depth architecture (6 validation layers), stateful tracking, and mathematical safety constraints. Validated against Unicode/encoding attacks, pattern evasion, multilingual/polyglot attacks (12+ languages including Basque, Maltese), and memory/session attacks. Protocol-based hexagonal architecture with LangChain integration.

Capture-the-Flag (CTF) environment setup tools for OWASP Juice Shop

Local trust scanner for AI-built and downloaded software.

JavaScript AST XRay analysis

marshall your npm/npm package installs with high quality and class 🎖