Search

Next.js security middleware with Redis-backed threat scoring, honeypot decoy routing, and Python ML engine for advanced detection.

🛡️ AI-powered security scanner with advanced threat detection, dual reporting system (detailed & summary), and comprehensive code analysis

LLM API security auditor — prompt injection, jailbreak, ASCII smuggling, data exfiltration, OWASP LLM Top 10 mapping

See what your API is really doing. Security scanning, N+1 detection, duplicate calls, DB queries — one command, zero config.

CodeThreat specializes in software security, providing AI-powered code security analysis tools. Available for both cloud and self-hosted environments, CodeThreat integrates seamlessly into existing CI/CD workflows and supports a wide range of programming languages. Key features include real-time reporting, advanced decompilation, and comprehensive scanning. The service aims to reduce false positives by up to 3 times, offering developers smart, actionable insights and remediation, making it easie

Comprehensive security tool to detect hardcoded API keys, tokens, and sensitive credentials in your codebase with 245+ detection patterns, entropy analysis, and baseline filtering

Nx plugin for SkillSpector security scanning: any SKILL.md gets a scan target reporting vulnerabilities, secrets, and risky patterns — with SARIF output and CI annotations.

Security scanner and remediation tool for OpenClaw/Clawdbot - 33+ checks, tier-based fixing, SARIF/HTML/JSON output, zero-trust tunnel detection

A lightweight and reliable React Native library to detect rooted Android devices and jailbroken iOS devices using modern Kotlin, Swift, and TypeScript. Built for security-focused mobile applications.

Audit Supabase security issues (RLS, grants, exposed functions) AND prove leaks live via active anon-key probe. Other auditors infer; this one fetches and shows the bytes leaked.

Kubernetes cluster security auditor — motor YAML extensible CIS K8s Benchmark, 58 checks (admission webhooks, storage, namespace policies, pods, RBAC), kube-bench wrapper, delta scan

Zero-dependency LLM/AI security scanner. Detects prompt injection, sensitive data leakage, excessive agency, and more — mapped to OWASP Top 10 for LLM Applications (2025). Works in Node.js, browsers, and edge runtimes.

Modern npm supply chain security scanner — detects obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation. 11 attack types, SBOM, NIST/EU CRA compliance reporting.

Client to communicate with Eufy-Security devices

IndustrialXPL-Forge (IXF) — OT/ICS/SCADA/HMI/IIoT Security Assessment & Exploitation Framework. Python-First, 631+ modules, 79 MITRE ATT&CK for ICS, 26 malware TTPs, 50+ vendors, 50+ protocols, SAST/LLM.

🚦 Pre-launch security audit for AI-built apps. Catches leaked API keys, missing Supabase RLS, open Firebase rules and billing abuse. Launch Score + GO/NO-GO, guided fixes, secret guard. Claude Code plugin & Agent Skills.

Claude Code skill that runs real security scanners (Semgrep, gitleaks, TruffleHog, Trivy, osv-scanner, ZAP) then verifies every finding against source. SAST, secrets across full git history, SCA, IaC, Supabase/Firebase RLS. One report tagged to OWASP Top 10 2025.

Tier-based AI package classification (native / adjacent / unrelated) for OpenA2A trust tooling

Spec-compliant offline verifier for ATX (Agent Trust eXtension) credentials — Ed25519 signature verification over the canonical payload (v1.0 pipe / v1.1 JCS RFC 8785), expiry, revocation, issuer-trust, and issuer-chain checks. Byte-for-byte interoperable

Simplify security in JavaScript — simple, fast, secure