OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

eBPF implementation that runs on top of Windows

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, MQTTS, POP3, POP3S, RTSP, SCP,…

Distributed PostgreSQL as an extension

AxoSyslog - the scalable security data processor

Maintained fork of ngx_cache_purge for NGINX: FastCGI, proxy, SCGI and uWSGI cache purging, wildcard keys, and optional background processing.

Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities

Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file acces…

nginx module for generate captcha and validate captcha code

syslog-ng is an enhanced log daemon, supporting a wide range of input and output methods: syslog, unstructured text, queueing, SQL & NoSQL.

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

ExploitGym is a large-scale, realistic benchmark built from real-world vulnerabilities designed to evaluate AI agents' ability to develop exploits.

Small and highly portable detection tests based on MITRE's ATT&CK.

libSQL is a fork of SQLite that is both Open Source, and Open Contributions.

A subset of JavaScript language to use in nginx

The official NGINX Open Source repository.

Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块

Embed the Power of Lua into NGINX HTTP servers

High Performance Web Platform Based on Nginx and LuaJIT

An eBPF security research harness and telemetry dashboard built with C, libbpf-rs, and Ratatui to empirically measure kernel verifier boundaries, CO-RE failure modes, and syscall tracing overhead.

Bindings for the LMDB C library

Verneuil is a VFS extension for SQLite that asynchronously replicates databases to S3-compatible blob stores.

High performance ja3 ja4 and http2 fingerprint for nginx.

A method of defending against SLOW GET, POST, & READ attacks implemented through eBPF using CO-RE and libbpf.

Pinger engine for monitoring latency and loss

Async Mode Nginx with QAT support which improves Crypto and compression performance

json lib for lua and C

Nginx module for ngx_lua to provide Lua API to inspect upstream http cache meta-data

A fair-share ratelimiter implemented in BPF

Nginx + WebAssembly