Build Software You Can Trust. Isolated, reproducible development environments and a secure package manager that give your whole team identical environments, while keeping AI agents off the laptop.

Armv8 Native Code Symbolic Simulator in Lean

FT3: Fraud Tools, Tactics, and Techniques Framework

Skills for Zeal of the Convert, [unprompted] 2026

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab.

Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.

Library implementing type inference/checking functionality based on the Lean theorem prover

windows emulator

Reference engine and content library for the Open Vulnerability Remediation Specification (OVRS) — a standard format for describing how to fix vulnerabilities.

MCP (Model Context Protocol) server for the Contentful Management API

A hand-picked collection of the finest of resources for the most awesome of agents, Claude Code, the undisputed champion of coding companions, from the unstoppable team at Anthropic PBC. A delectab…

Set of tools to assess and improve LLM security.

Examine Chrome extensions for security issues

RADAR (Rapid Assessment of DNS And Reconnaissance) is an advanced DNS reconnaissance tool designed to identify technologies and services used by domains through their DNS footprints

Large language model inference over confidential data using AWS Nitro Enclaves

Freeing data processing from scripting madness by providing a set of platform-agnostic customizable pipeline processing blocks.

future-proof vulnerability detection benchmark, based on CVEs in open-source repos

A repo for distributed training of language models with Reinforcement Learning via Human Feedback (RLHF)

All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!

Transform Linux Audit logs for SIEM usage

Assisted Log Enabler for AWS - Find AWS resources that are not logging, and turn them on.

Automatically archive links to videos, images, and social media content from Google Sheets (and more).

Inspect certificate authorities in container images

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

AWS Security Analytics Bootstrap enables customers to perform security investigations on AWS service logs by providing an Amazon Athena analysis environment that's quick to deploy, ready to use, an…