S

security

Full set of AppArmor profiles (~ 1500 profiles) https://apparmor.pujol.io

EU AI Act compliance scanner for GitLab CI/CD pipelines — detects AI/ML libraries and posts risk classification as MR comments.

The firmware engineering home of the Cryptohack electronic badge project.

🚦 Auto-Ledger 📱 Smart Digital Driving License & Penalty Points System (Sri Lanka) An **enterprise-level full-stack system designed for managing digital driving licenses, traffic violations, and penalty points tracking in Sri Lanka. This project is developed as the Final Year HND in Software Engineering project.

Diagnostic toolkit for GitLab self-managed deployments in regulated environments

Deterministic, format-preserving dependency remediation for GitLab CI — Maven first. A hundred eyes on your dependency graph.

This application shows the main safety mistakes that can be made in rails

Invisible infrastructure for Dracon developer workspaces: git sync, system guard, and warden encryption utilities.

Lightweight static-analysis scanner for AUR PKGBUILD and .install scripts — detects backdoor patterns, obfuscation, and supply-chain indicators of compromise. Written in Babashka/Clojure.

Phoenix is a suite of configurations & advanced modifications for Mozilla Firefox, designed to put the user first - with a focus on privacy, security, freedom, & usability. https://phoenix.celenity.dev/

Private, secure, user first web browser for Android. https://ironfoxoss.org/

https://pwn.by/noraj/

Monitoring centralisé pour instances Nextcloud multiples

Low-cost home security system using existing devices, RTSP cameras, motion detection, and automation scripts.

Personal technical blog and digital garden — systems automation, identity governance, security infrastructure, Clojure, Bitcoin SV, and agentic workflows. Built with the Fabricate framework (Babashka + Hiccup + Pandoc + D2).

NVD/CVE as JSON files

Securekit is a protocol-agnostic security kernel that enforces zero-trust, sandboxed execution for AI tool use. It sits between any LLM or agent system and its tools, validating, isolating, and auditing every action to prevent unsafe execution across MCP, OpenAI tools, and custom AI protocols. https://roxanneardary.com/securekit/

PolyConnect is an open-source, fully encrypted, stateless, and modular API platform that unifies multiple third-party services under a single intelligent architecture. It offers AI-powered adapters, secure end-to-end communication, cross-API joins, SDK generation, observability, and automated workflows. Designed for developers and enterprises, PolyConnect provides a fast, flexible, future-proof solution for integrating, monitoring, and automating any API ecosystem. https://roxanneardary.com/polyconnect/

Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol (TLS, SSL, SSH, DNSSEC) and related setting (HTTP headers, DNS records) analyzer and fingerprint (JA3, HASSH tag) generator with Python API and CLI.