Search

Enterprise-grade authentication and authorization utilities with RBAC, ABAC, resource-based access control, session management, guards, secure cookies, and comprehensive error handling

AI-powered security scanner with 9-agent swarm. Detect secrets, vulnerabilities, attack paths. CLI, API, or cloud dashboard at app.aurasecurity.io

Map how your app code reaches your Supabase or Firebase backend: tables, RPCs, Security Rules, Cloud Functions, storage, grants and RLS. Static, offline, no AI.

ModelRed is a cloud-based, provider-agnostic platform for AI security testing, red teaming, and vulnerability assessment focused on large language models (LLMs) and AI systems. It automates security probe execution across 10,000+ attack vectors, applies detector-based verdicts, and generates ModelRed Scores with detailed reports. With integrations for OpenAI, Anthropic, Google, AWS, Azure, and custom REST endpoints, ModelRed fits into CI/CD pipelines, offers team governance, developer SDKs, comp

App-native WAF, AI-assisted autosetup, rule packs, policy controls, bot defense, credential-stuffing protection, and request security middleware for Node.js applications.

All-in-one security middleware for Express.js, Fastify and NestJS — helmet, cors, rate-limit, XSS protection, input validation, request logging & IP blacklist in a single config.

JAKU (呪) — Autonomous Security & Quality Intelligence Agent for vibe-coded apps. XSS, SQLi, prompt injection, QA testing, and attack chain correlation in one command.

Pre-publication checks for public static websites: accessibility, links, responsiveness, SEO, security headers, privacy, HTML validity, page weight, CSP, i18n, visual regression and Lighthouse.

CloudXPL-Forge (CXF) — Cloud security assessment framework. 212 modules across AWS, Azure, GCP, Kubernetes, serverless, storage, multi-cloud, credential and network attack surfaces.

Local, rule-based EU AI Act risk classifier with an AI security lens (NIST AI RMF, OWASP LLM Top 10, MITRE ATLAS) and document generation.

TollWarden payment security for the Vercel AI SDK: scan-before-you-pay tools for x402 payments, plus an onStepFinish handler that auto-tags provenance for prompt-injection detection, and guardedPayment for enforcement by construction.

PaySafe payment security for the Vercel AI SDK: scan-before-you-pay tools for x402 payments, plus an onStepFinish handler that auto-tags provenance for prompt-injection detection, and guardedPayment for enforcement by construction.

Adversarial AI bug hunter — multi-agent pipeline finds security vulnerabilities, logic errors, and runtime bugs, then fixes them autonomously. Works with Claude Code, Cursor, Codex CLI, Copilot, Kiro, and more.

Official JavaScript SDK for IPGeolocation.io. Effortlessly integrate IP Geolocation, IP Security, Timezone, ASN, Astronomy, User Agent, Abuse Contact, and Timezone Conversion APIs into your Node.js applications.

Official Typescript SDK for IPGeolocation.io. Effortlessly integrate IP Geolocation, IP Security, Timezone, ASN, Astronomy, User Agent, Abuse Contact, and Timezone Conversion APIs into your Node.js applications.

Small, auditable security primitives for the ragleap libraries: immutable tenant scopes, a tamper-evident hash-chained audit log, secret handling and redaction, and hard input limits. Standard library only. Not independently audited.

React Native biometric authentication library for iOS and Android. Easy integration of Face ID, Touch ID, and Fingerprint authentication with TypeScript support. Compatible with new architecture (TurboModules) and Expo. Secure mobile login solution.

Production-grade security hardening skill for Claude Code — AI/vibe-coded projects, OWASP Top 10, zero-trust, red-team, Supabase RLS, compliance (SOC 2, PCI-DSS, GDPR/LGPD)

Natural-language driven dynamic assembler for DeepSeek Harness (dsh): discovers plugins at runtime (official-first, third-party optional), generates assembly plans, and loads them via Cordis — with built-in security audit gates for unofficial plugins.

<h1 align="center">Infisical CLI</h1> <p align="center"> <p align="center"><b>Embrace shift-left security with the Infisical CLI and strengthen your DevSecOps practices by seamlessly managing secrets across your workflows, pipelines, and applications.</