Lists (10)
Stars
Zero instrucment LLM and AI agent (e.g. claude code, gemini-cli) observability in eBPF
Secure, kernel-enforced sandbox for AI agents, MCP and LLM workloads. Capability-based isolation with secure key management and blocking of destructive actions in a zero-trust environment.
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE
Python packages which provide a common interface to platform-specific hardware peripherals in SONiC
Secure and fast microVMs for serverless computing.
Rex is a safe and usable kernel extension framework that allows loading and executing Rust kernel extension programs in the place of eBPF.
A catalogue of Rust design patterns, anti-patterns and idioms
macOS app to create standard or customized configuration profiles.
Stealthy Linux Kernel Rootkit for modern kernels (6x)
The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)
Mimic is a eBPF virtual machine and emulator which runs in userspace
A tiny, well-tested Swift library for handling IP Addresses.
"The missing ProcMon for macOS": Mac Monitor records Endpoint Security events and displays them for analysis.
A tool to help programmers debug and analyze Linux Kernel BPF verification failures.
Here you can find write ups for iOS Vulnerabilities that have been released.
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one
Debug your GitHub Actions via SSH by using tmate to get access to the runner system itself.
A modular toolkit for building fast, reliable Web applications and libraries with Rust and WASM
GitHub Action to compile LaTeX documents
Free, no-nonsense, super fast blogging.
A private, p2p alternative to Slack and Discord built on Tor & IPFS