security-auditing

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

reddacted lets you analyze & sanitize your online footprint using LLMs, PII detection & sentiment analysis to identify anything that might reveal personal info you may not want correlated with your anonymous profile

Verified Entity Identity Lock (Expose hidden trust paths in your AWS IAM setup before they become security risks.)

Python CIS Benchmark auditor for Windows 10, Windows 11, and Windows Server, with security configuration checks and HTML/JSON compliance reports.

📊 Automate stock analysis from data collection to risk assessment and transaction reporting with this comprehensive workflow.

Network and domain security auditor scanning Windows Active Directory, Linux systems, and network infrastructure with AI-powered hardening guides and professional reporting.

High-assurance Compliance-as-Code framework, mapped to the Portuguese National Cybersecurity Reference Framework (QNRCS/CNCS) and EU NIS2 Directive. Includes the automated remediation engine.

🖼️ Generate and edit images using text with the Opencode Antigravity Image plugin, supporting multiple variations and consistent character rendering.

A practical project to harden an Ubuntu server using security best practices.

Architectural analysis and threat modeling of bag distribution mechanisms at Apple.

TestCardX is a professional-grade credit card testing & validation framework for payment gateway integration, security auditing, and QA. Features Luhn-valid generation, multi-country BIN database, batch processing, parallel execution, and multiple export formats For authorized testing only.

Reglet is a security-first compliance and infrastructure validation platform built on WebAssembly (Wasm). It enables engineering teams to define policy-as-code, execute validation checks in isolated sandboxed environments, and generate standardized audit artifacts (OSCAL/SARIF).

DuskProbe is a web security testing framework that combines passive reconnaissance and active vulnerability scanning. Built with aiohttp and Streamlit, it identifies OWASP Top 10 risks and business logic flaws to provide coverage of modern web attack surfaces.

Portable Kms Pico Official：免安装本地激活工具 这是一款轻量且完全绿色的 KMS 激活工具，专门用于一键激活 Windows 操作系统和 Office 办公套件。无需安装，即开即用，不修改系统注册表冗余文件，是电脑装机必备的便携式激活利器。

🚀 Enhance your AI-assisted security workflows with plugins from the Trail of Bits Skills Marketplace for smarter analysis and testing.

An Enterprise-grade multi-modal RAG application featuring domain-driven AI routing for automated source code vulnerability auditing, API payload analysis, and high-volume server log parsing.

🚀 Evaluate base LLMs' agent capabilities in software engineering and deep research with APTBench for efficient, predictive performance insights.

It is a Reporting Tool made using VAPT and OSINT

Enhance AI coding agents with structured workflows and best practices for building reliable web applications through production-grade engineering skills.