Search

Code security analyzer powered by acorn

Express middleware to handle openapi security.

Content-Security-Policy middleware for Express

Content-Security-Policy header generator

Comprehensive CLI tool for dependency management - unified 'depmender fix' command handles all operations: scan, fix, install-missing, remove-unused, update-deps, dedupe, sync, resolve, and more. Supports npm, yarn, pnpm with security audits and real-time

Agent skills (SKILL.md) that find and fix the five security failures AI-generated code leaves behind most often: missing RLS, frontend-only authorization, IDOR, exposed secrets, unvalidated input. Works in Claude Code, Codex, OpenCode, Antigravity, Devin,

White-box, OSWE-style security audit for Claude Code: traces source→sink, chains findings to unauthenticated RCE, verifies each chain, and writes an evidence-backed Markdown + HTML report. PHP · Node · Python · Java · .NET.

Security scanner for VS Code AND a standalone `caspian` CLI you can run anywhere (PowerShell/cmd/bash, no VS Code needed) — 295+ rules covering code and infrastructure (Dockerfile, Terraform, Kubernetes), intra-file taint tracking, SSRF/XXE/SSTI/deseriali

AppSec Skills — 15 plug-and-play Claude Code security skills that audit, harden, and fix any website or app before you ship it. OWASP Top 10, auth, API, database, frontend, backend, cloud, dependencies, secrets, and pentest-style checks — all defensive, all evidence-based.

SOTA SEO CLI for MG Software projects: crawl, audit, link graph, anti-spam (March 2026), GEO/AEO, programmatic SEO checks, plus dedicated security & privacy audits (HTTP headers, TLS, cookies, dependency vulns, takeover, GDPR/PII). Runs on production URLs

CloudXPL-Forge (CXF) — Cloud security assessment framework. 508 modules across 20 categories: AWS, Azure, GCP, OCI, Alibaba, Tencent, IBM, DigitalOcean, OVHcloud, Hetzner, Kubernetes, serverless, storage, multi-cloud, hypervisors (VMware ESXi/vCenter, Hyper-V, KVM/QEMU, Xen/Citrix, Nutanix, Firecracker, Kata, side-channel), VDI escape, PaaS escape, CI/CD runner escape, 100+ CVEs 2019-2026, VM/container/tenant escape, credential and network attack surfaces.

One Dionys (Content Security Policy Generator) - A utility for generating and deploying content security policies in web applications, improving application security.

Council Protocol - Multi-agent consensus, communication, and governance for AI systems

Azure Security Center API specification for Microsoft.Security resource provider.

An opionated library to secure Express apps with Passport

Cloud relay SDK for Sideband: connect clients and daemons via relay.sideband.cloud with automatic session management, token renewal, and E2EE.

A simple but powerful content-filter. Also provides protection against NoSQL (like MongoDB) injection attacks on Node.js

Fail-closed document inspection before untrusted files reach an LLM

Open-source CLI toolkit for automated red-teaming of LLM-powered applications

Smart contracts for the Secure Contract Interaction protocol