S

security

A Python-based CLI tool designed to scan GitLab projects for compliance against the CIS GitLab Benchmark. Check out the recommendations-as-code in this repo. Read the docs for more info.

Phoenix is a suite of configurations & advanced modifications for Mozilla Firefox, designed to put the user first - with a focus on privacy, security, freedom, & usability. https://phoenix.celenity.dev/

Strip credential-like content from free-form strings before they reach logs or telemetry. Part of the phpboyscout Go toolkit. · https://redact.go.phpboyscout.uk

Bounded, DoS-safe regex compilation for patterns from untrusted sources. Part of the phpboyscout Go toolkit. · https://regexutil.go.phpboyscout.uk

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) generator with Python API and CLI.

Strip credential-like content from strings before logs or telemetry. Part of the phpboyscout Rust toolkit. · https://redact.rust.phpboyscout.uk

AppArmor profiles for various linux applications.

Lume is a lightweight, zero-dependency JavaScript tooltip engine providing mutation-aware DOM lifecycle management, collision detection, and hardware-accelerated positioning.

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! https://snuffleupagus.rtfd.io

This project provides a secure, minimal, and multi-architecture (linux/amd64, linux/arm64) Docker image to easily run a BorgBackup server over SSH. Built on Alpine Linux, it emphasizes security with a dedicated non-root backup user, ed25519 key-only authentication, and robust configuration options via authorized_keys and environment variables for flexible backup storage. Automated builds via GitLab CI.

Diagnostic toolkit for GitLab self-managed deployments in regulated environments

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

Private, secure, user first web browser for Android. https://ironfoxoss.org/

Mirror of https://github.com/hwdsl2/docker-ipsec-vpn-server. Please open issues and pull requests there. Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. https://hub.docker.com/r/hwdsl2/ipsec-vpn-server

Mirror of https://github.com/hwdsl2/setup-ipsec-vpn. Please open issues and pull requests there. Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2.

Full set of AppArmor profiles (~ 1500 profiles) https://apparmor.pujol.io

A project dedicated to teaching beginners and non-tech-savvy people about digital privacy and cybersecurity.

Invisible infrastructure for Dracon developer workspaces: git sync, system guard, and warden encryption utilities.

Defense-engineering library: attack classes mapped to detection patterns, Sigma rules, Windows trust boundaries, and driver attack surface.