Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, we configure the agent for adversarial thinking…

teleconferencing system written in rust

A clean, minimal template for building games with React, TypeScript, Three.js, and Vite - built with security-first principles.

This project runs a Model Context Protocol (MCP) server that wraps the CodeQL query server. It enables tools like [Cursor](https://cursor.sh/) or AI agents to interact with CodeQL through structure…

Terraform AWS provider

Trail of Bits Testing Handbook

A self-paced course to learn Rust, one exercise at a time.

A GitHub Security Lab initiative, providing an in-repo learning experience, where learners secure intentionally vulnerable code.

Sample cloud-first application with 10 microservices showcasing Kubernetes, Istio, and gRPC.

Coverage-guided, in-process fuzzing for the JVM

All of the ad-hoc things you're doing to manage incidents today, done for you, and much more!

A log4j vulnerability filesystem scanner and Go package for analyzing JAR files.

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

eBPF-based Security Observability and Runtime Enforcement

Automate the creation of a lab environment complete with security tooling and logging best practices

Semgrep rules registry

Security Scorecards - Security health metrics for Open Source

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

Tool to check for dependency confusion vulnerabilities in multiple package management systems

A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.

Prepackaged and precompiled github codeql container for rapid analysis, deployment and development.