Havuz

A free and open-source database management tool, suitable for team use. It offers capabilities such as access control, data anonymization, S

A Lean backend framework whose authorization safety is formally proven. The developer writes only a Cedar schema and policies; handlers are

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware tabl

Security checklist for vibe coded apps. AI rules file + automated audit + manual verification.

Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.

Offline pentest workflow tracker — turns nmap output into a port-aware, KB-matched recon checklist in under 30 seconds. Self-hosted, single

Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys

Local-first MCP security scanner for AI-generated apps: four open-source engines plus the Synvoya engine. Scan → fix → rescan from Claude Co

go-dev-auth The comprehensive authentication library for Go. One config struct. Batteries included. Own your users.

Distributed, centrally-controlled Web Application Firewall built on pingap & Cloudflare Pingora. Semantic attack detection, Cloudflare-style

Local-first MCP policy proxy. Tool-block, SQL-mutation gate, PII redact, audit, rate-limit, OpenTelemetry, vault secrets, first-use quaranti

Practical DevOps interview questions for Aspiring DevOps Engineers

Styx is where everything converges: every repo you work in, the AI coding agents building in them, and every login they need to ship. Switch

Static analyzer for Postgres Row-Level Security — 67 lint rules covering tenant and per-user row-scoping bugs, performance traps, and hygien

Skill pack that turns any coding agent (Claude Code, Codex, AGENTS.md-compatible) into a senior production engineer — FastAPI, PostgreSQL, D

Production-ready Spring Boot 4 template built with Clean Architecture, DDD, JWT authentication, PostgreSQL, Docker, and enterprise-grade sec

Encrypted peer to peer secret manager. Sync .env secret between dev machines - your secrets never touch a server in readable form.

Open-source Supabase security auditor: detects RLS-disabled tables, public buckets, exposed SECURITY DEFINER functions. Active anonymous pro

Experimental source-available SQLite/libSQL backend for human-and-agent-native workflows, with Studio and scoped MCP access.

🎙️ Adaptive Audio Authentication Engine: Multi-layer voice biometric system with deepfake detection, speaker verification (ECAPA-TDNN), ASR

Scope-enforced DB queries for Drizzle ORM

📝 Clixo - Ultra-secure text sharing and markdown editor with Supabase sync, password encryption & self-destruct timers.

Skill para Claude, Codex, Cursor e outros agentes: check pré-lançamento do seu app com 20 checagens de segurança + 10 de prontidão (Lovable,

Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database

Self-hosted pentest engagement management and report.

Pre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt i

Local-first password manager — zero cloud, zero telemetry. Rust+Tauri 2+XChaCha20-Poly1305+Argon2id+SQLCipher. 6 item types incl. Servers, B

Production-grade, security-first AI platform on a single local K8s cluster — GitOps (ArgoCD), Vault, Kyverno, Falco, self-hosted GPU LLM ser

PostgreSQL Extension Transparent Data Encryption - AES-256-GCM, Vault/OpenBao/PKCS#11 HSM - no patch needed in postgresql core

Self-hosted database access-control proxy for MySQL and PostgreSQL: lineage-aware column masking, Cedar policy, fail-closed deny, tamper-evi

Terminal-native passive OSINT CLI for local-first public-source investigations, evidence correlation, and case management.

Zero-knowledge client-side password vault with WebCrypto AES-256-GCM encryption, PBKDF2 key derivation, and offline persistence.