Open source cloud security assessment tool for AWS, Azure, GCP, and Kubernetes with hundreds of compliance checks.

Security auditing CLI tool that performs pre-installation checks on npm packages to detect vulnerabilities, malware, and supply chain risks before installation

Audits a Claude Code skill for security risks in three modes: before download (from a URL or install command), after download but before install (from a .skill file), or after install (from a local skills directory). Use this skill whenever a user is about to install a skill from any source — including GitHub URLs, git clone commands, npx/npm commands, curl/wget downloads, pip installs, marketplace links, or raw SKILL.md URLs. Also trigger when a user asks "is this skill safe?", "should I trust this skill?", "can you check this before I install it?", "audit this skill", or pastes any link to a skill repository or .skill file. If a user mentions installing ANY skill, proactively offer to audit it first — do not wait for them to ask.

A CLI to lint a lockfile for security policies

Spring Security Test provides comprehensive testing utilities for Spring Security applications with mock authentication, security context testing, and web security testing features.

Spring Security support for Apereo's Central Authentication Service (CAS) enabling Single Sign-On authentication

Spring Security Web module provides comprehensive security services and servlet integration for web applications built with the Spring Framework

Spring Security configuration module providing comprehensive declarative security configuration capabilities for Spring applications

Spring Security Web module provides comprehensive web security features for Spring-based applications, including servlet-based authentication, authorization, CSRF protection, session management, and security filter chain implementation

Security oriented static analyser for python code.

Code audit tool for python

Spring Security ACL provides instance-based security for domain objects through a comprehensive Access Control List implementation

Developer-first, cloud-native security tool to scan and monitor your software development projects for security vulnerabilities

Automated auditing, performance metrics, and best practices for the web.

Application security middleware for Express.js providing CSRF protection, CSP headers, and comprehensive web security features.

Command line interface for the Node Security Platform to scan Node.js projects for known security vulnerabilities

Spring Security LDAP module providing comprehensive LDAP authentication and authorization capabilities for enterprise applications

Spring Security Crypto provides cryptographic utilities including password encoding, key generation, encryption, and various hashing functions

Security holding package that prevents malicious code from claiming the fs package name.

Scan dependencies for known vulnerabilities and licenses.