S

security

Hardware-bound & Cloud-gated binary execution, cryptographic provenance, and anti-tamper envelope sealing for Crystal.

Phoenix is a suite of configurations & advanced modifications for Mozilla Firefox, designed to put the user first - with a focus on privacy, security, freedom, & usability. https://phoenix.celenity.dev/

Government TLS certificates applied only where they are needed ⚡

Full set of AppArmor profiles (~ 1500 profiles) https://apparmor.pujol.io

Modular JOSE toolkit for Go, built on go-jose and golang-jwt/jwt for signing, verification, encryption, and public-key distribution.

ZTTP: Zero-Trust SSH Bastion Proxy built in Golang

Plattform to use gitlab kubernetes integration in multi user groups environments.

Mirror of https://github.com/hwdsl2/setup-ipsec-vpn. Please open issues and pull requests there. Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2.

Diagnostic toolkit for GitLab self-managed deployments in regulated environments

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) generator with Python API and CLI.

Rule Repository for GitLab SAST

Lume is a lightweight, zero-dependency JavaScript tooltip engine providing mutation-aware DOM lifecycle management, collision detection, and hardware-accelerated positioning.

Reliable one-way file transfer through hardware data diodes using UDP multicast and RaptorQ FEC. Rust workspace with sender/receiver daemons, REST API, SvelteKit web UI, and ClamAV/YARA security scanning. Tested at 758 Mbit/s on 1 Gbps links with 0% packet loss.

Bedrock RMF — self-hosted NIST 800-53 Rev 5 / RMF compliance management (an eMASS / Xacta alternative): control implementations to the CCI, POA&Ms, evidence, HW/SW inventory, PPSM, STIG checklists, cloud inheritance. AGPL-3.0.

This is a mirror for the SSH library https://www.libssh.org/

Mirror of https://github.com/hwdsl2/docker-ipsec-vpn-server. Please open issues and pull requests there. Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. https://hub.docker.com/r/hwdsl2/ipsec-vpn-server

Read-only mirror of cicd-sensor: An open-source runtime security monitoring tool for CI/CD environments leveraging eBPF.

A lightweight, interruptible, framework-agnostic typewriter animation library designed for modern web applications and static sites.

AppArmor profiles for various linux applications.