SPIKE is a lightweight secrets store that uses SPIFFE as its identity control plane. It protects your secrets and helps your ops, SREs, and sysadmins manage sensitive data securely with minimal overhead.

An open taxonomy and scoring framework for evaluating AI agent sandboxes: 7 defense layers, 7 threat categories, 3 evaluation dimensions, 27 "sandboxes" scored.

OWASP Top 10 Infrastructure Security Risks

Know what's happening on your network before it becomes a problem: real-time eBPF monitoring

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

A set of automation tools intended to assist with applying security hardening configurations for Proxmox VE 9.1, informed by recommendations from the CIS Debian 13 Benchmark and official Proxmox documentation

My cyber security notes.

EKS Goat: AWS ECR & EKS Security Masterclass by Anjali & Divyanshu

Python CLI for detecting cloud storage misconfigurations. AWS S3 real API scanning with boto3. Azure Blob and GCP Storage on roadmap.

A repository for learning pentesting

🔐 A curated list of awesome DevSecOps tools, practices, and resources for securing the software development lifecycle

A comprehensive collection of AWS Security projects covering Identity & Access Management (IAM), Compute Security (EC2), and Network Security. Perfect for AWS practitioners and Cybersecurity learners

AccessD is an open-source infrastructure access gateway that provides secure, audited access to servers, databases, and services — without giving operators raw credentials.

14 production-ready security components for Ubuntu hardening (CIS Benchmark 100%). Boot, AIDE, SSH, kernel, rkhunter, auditd (CIS 4.1.x), AppArmor, Vaultwarden, UFW, nftables, fail2ban, Lynis. Modular drop-in configs, Prometheus monitoring-ready. MIT License.

Radium corpus — Execution Governance for Complex Automated Systems

Local-first AWS security auditor CLI that scans S3, EC2, IAM & RDS, maps findings to CIS/SOC2/HIPAA, and generates HTML reports with remediation commands.

Beginner Cisco gateway configuration with PC and router connectivity tests.

Namely SecScan is a read-only VPS security scanner that generates a full audit report.

Step-by-step Cisco Packet Tracer IP Routing lab with configuration details.

AI-powered Terraform security analyzer that scans Terraform Plan JSON files to detect cloud misconfigurations and generate executive-ready security reports. Built for DevSecOps and CI/CD workflows.