Developer-first error tracking and performance monitoring

Manages application of security headers with many safe defaults

The Nu Html Checker (vnu)

ZAP Add-ons

HTML Standard

WebAppSec Content Security Policy

A browser API to prevent DOM-Based Cross Site Scripting in modern web applications.

DOM Standard

The most advanced open-source browser fingerprinting library

DNS over HTTPS config profiles for iOS & macOS

Bridge API to connect with existing Java APIs.

Fetch Standard

Repair and secure untrusted HTML

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

MIME Sniffing Standard

WebAppSec Subresource Integrity

The regex file necessary to build language ports of Browserscope's user agent parser.

Application Layer DoS attack simulator

Heartbleed demonstration

Mozilla HTTP Observatory

Parse Content Security Policy headers, warn about policy errors, safely manipulate, render, and optimise policies

The password hash Argon2, winner of PHC

Version 1.2. This is the source code to STUNTMAN - an open source STUN server and client code by john selbie. Compliant with the latest RFCs including 5389, 5769, and 5780. Also includes backwards …

Hackable Markdown Editor and Viewer (WIP)

Log all the CSP violations!

code generator for Shift format ASTs

Keyhouse is a skeleton of general-purpose Key Management System written in Rust.

reverse many of the transformations applied by minifiers and naïve obfuscators

ECMAScript parser that produces a Shift format AST