Search

SOTA SEO CLI for MG Software projects: crawl, audit, link graph, anti-spam (March 2026), GEO/AEO, programmatic SEO checks, plus dedicated security & privacy audits (HTTP headers, TLS, cookies, dependency vulns, takeover, GDPR/PII). Runs on production URLs

Embedded & Perimeter Security Assessment Framework — 3000+ modules, 600+ CVEs, 80+ vendors. Unified from FirewallXPL-Forge, ISF OT/ICS protocol clients, and deep ExploitDB/Metasploit coverage. v2.4.0 adds Mirai/Condi reference analysis (string decoder, orchestrator), GPON scanner, C2 beacon detector, CnC simulation lab.

Inside-the-app security middleware for Python. One install protects FastAPI, Flask, and Django against XSS, SQL injection, CSRF, SSRF, HPP, prompt injection, bot traffic, rate limiting, and 20+ more attack types. Includes prompt-injection signature library, LLM token-budget middleware, and a 646-pattern bot corpus with consistent API across the Node and Go SDKs. The CLI ships separately at npm install -g @arcis/cli.

One Dionys (Content Security Policy Generator) - A utility for generating and deploying content security policies in web applications, improving application security.

Open-source CLI toolkit for automated red-teaming of LLM-powered applications

Guardrails for AI-assisted development - Detects IDOR, missing input validation, hardcoded secrets, and other critical bugs in AI-generated code

Sets secure response headers for Next.js.

Production-ready security middleware for Express / NestJS

TLS 1.2/1.3 for any JavaScript Environment

Security middleware preset for Magik (Helmet, CORS)

Prompt-injection eval harness — runs a curated attack corpus against an LLM target and scores defense posture over time using Claude-as-judge.

A simple but powerful content-filter. Also provides protection against NoSQL (like MongoDB) injection attacks on Node.js

Deny-first Pi guardrails that keep LLM shell and file access safe, transparent, and user-approved.

Lightweight security helpers for Express

Deterministic LLM prompt defense scanner — 12 attack vectors, pure regex, zero AI cost, < 5ms

Production-grade AI defense — deterministic filters + optional LLM veto verification.

LLM-driven adversarial attack corpus generator for prompt-injection evaluation. Feeds prompt-eval with novel, category-tagged, judge-validated attacks.

An opionated library to secure Express apps with Passport

Smart contracts for the Secure Contract Interaction protocol

Open-source JavaScript enterprise LLM protection toolkit for Node.js and Next.js