🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft, Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.

Open source templates you can use to bootstrap your security programs

Automated Adversary Emulation Platform

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +70 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC,…

🎯 SQL Injection Payload List

Measures the effectiveness of your Web Application Firewall (WAF)

Go implementation of Open Cybersecurity Schema Framework (OCSF) for standardized cybersecurity data handling, ensuring easy integration and high performance in Go applications.

Awesome secure by default libraries to help you eliminate bug classes!

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

The trustworthy ReDoS checker

This repository is the home of the River reverse proxy application, based on the pingora library from Cloudflare.

A library for building fast, reliable and evolvable network services.

Detect file content types with deep learning

http-wasm middleware based on Coraza WAF

A parser for the SecRules Langue

A tool that allows you to document and assess any security automation in your SOC

TypeDB: the power of programming, in your database

Universal JSON, BSON, YAML, CSV, XML, mt940 converter with templates

Coraza NGINX Experimental Connector

OpenTofu lets you declaratively manage your cloud infrastructure.

Awesome AWS service control policies (SCPs)

ANTLR based SecLang parser

Secrets scanner that understands code

Open Source Cloud Security

Home of the Renovate CLI: Cross-platform Dependency Automation by Mend.io

This is a collection of threat detection rules / rules engines that I have come across.

A command-line tool to perform Local Health Check Probes inside Container Images (ECS, Docker)

CookieCloud是一个和自架服务器同步浏览器Cookie和LocalStorage的小工具，支持端对端加密，可设定同步时间间隔。本仓库包含了插件和服务器端源码。CookieCloud is a small tool for synchronizing browser cookies and LocalStorage with a self-hosted server. It suppo…

The Security Champion Framework provides both a measuring stick and a roadmap generator for Champion Programs.