Search

Embedded & Perimeter Security Assessment Framework — 3000+ modules, 600+ CVEs, 80+ vendors. Unified from FirewallXPL-Forge, ISF OT/ICS protocol clients, and deep ExploitDB/Metasploit coverage. v2.4.0 adds Mirai/Condi reference analysis (string decoder, orchestrator), GPON scanner, C2 beacon detector, CnC simulation lab.

Inside-the-app security middleware for Python. One install protects FastAPI, Flask, and Django against XSS, SQL injection, CSRF, SSRF, HPP, prompt injection, bot traffic, rate limiting, and 20+ more attack types. Includes prompt-injection signature library, LLM token-budget middleware, and a 646-pattern bot corpus with consistent API across the Node and Go SDKs. The CLI ships separately at npm install -g @arcis/cli.

One Dionys (Content Security Policy Generator) - A utility for generating and deploying content security policies in web applications, improving application security.

Post-quantum end-to-end encryption with ML-KEM-768. Seed phrase–based accounts. Auto-expiring messages. Offline-ready. Exportable encrypted messages. Tamper-proof threads with blockchain-like integrity. Quantum-resistant messaging.

Composable security plugin foundation for Federated Wiki

LLM-driven adversarial attack corpus generator for prompt-injection evaluation. Feeds prompt-eval with novel, category-tagged, judge-validated attacks.

Deterministic LLM prompt defense scanner — 12 attack vectors, pure regex, zero AI cost, < 5ms

Shannon-style AI Agent Curriculum - Self-testing platform with 15 grades from basics to advanced AI pentesting, prompt injection, and jailbreak defense

Guardrails for AI-assisted development - Detects IDOR, missing input validation, hardcoded secrets, and other critical bugs in AI-generated code

Security middleware preset for Magik (Helmet, CORS)

Bun security scanner for SocketDev

An opionated library to secure Express apps with Passport

Security Context

A simple but powerful content-filter. Also provides protection against NoSQL (like MongoDB) injection attacks on Node.js

Open-source CLI toolkit for automated red-teaming of LLM-powered applications

Sets secure response headers for Next.js.

Cloud relay SDK for Sideband: connect clients and daemons via relay.sideband.cloud with automatic session management, token renewal, and E2EE.

Smart contracts for the Secure Contract Interaction protocol

Production-ready security middleware for Express / NestJS

A library to process OpenAPI security definitions in parallel.