Principios e Boas Práticas sobre Desenvolvimento Seguro
🔐 Securing Your Digital Sanctuary, Trust None, Protect Everything.
LLM | Agentic | Security | Operations in one github repo with good links and pictures.
FAANG (MANGA) Security Engineer Interview Collection. An ongoing & curated collection of awesome software, frameworks and libraries, learning tutorials and videos, technical guidelines and best practices, and cheatsheets in the world of Security Engineering Career.
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about DevSecOps in Cybersecurity.
Firewall-System based on OpenWRT or Pi-Hole with UnBound, TOR, optional Privoxy, opt. ntopng and opt. Configuration of the AVM FRITZ!Box with Presets for Security and Port-List. Please visit:
Conceitos sobre Security-by-Design e alguns passos sobre como implementar isso no dia-a-dia.
Research and Development for Cybersecurity Engineering. Our mission is to develop a scientific theory of cybersecurity and a toolchain for the secure engineering of cyber-physical systems.
The open Security by Design Playbook
Security by Design reference: JWT/mTLS auth, RBAC, DevSecOps pipeline (SAST/DAST/SBOM/Cosign), Kubernetes hardening. Production-grade patterns.
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Security Assurance in Cybersecurity
Automated STRIDE threat-model generator: reads a code repo and/or architecture diagram, recovers a data-flow diagram with inferred trust boundaries, and drafts a reviewed per-component STRIDE threat model with mitigations mapped to OWASP ASVS / NIST 800-53 / CWE. Human-in-the-loop; a draft for review, not a sign-off.
Plan everything before anything. One command turns an idea or an existing codebase into an audit-aware, validated master plan (PLAN.mdx), from pricing and product decisions to architecture, security, and launch, that any coding agent executes checkbox by checkbox. For Claude Code, Codex, Cursor, Gemini CLI, OpenCode, and any Agent Skills client.
The Python Security Handbook
SDK de código abierto en Python para el patrón Backend for Agents (BFA), extendido como un servidor de enrutamiento dinámico en caliente (IRC-A) con soporte para FAISS y MCP.
Find simple open cyber solutions that do work!
an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM
A comprehensive architectural framework for integrating security into the SDLC. Featuring an interactive 12-step execution model, threat modeling methodologies (STRIDE), and DevSecOps best practices. Security is not a feature; it is the foundation
Agent Skill with structural security for autonomous LLM agents: dangerous capabilities are never implemented instead of guarded, accumulated content is treated as untrusted, and each agent process gets one external adapter; the installable form of AAP ADR-0001 to 0004.
To associate your repository with the security-by-design topic, visit your repo's landing page and select "manage topics."