TypeScript · security Tools

shannon

github

Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

web-check

github

🕵️‍♂️ All-in-one OSINT tool for analysing any website

personal-security-checklist

github

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026

juice-shop

github

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

helmet

github

Help secure Express apps with various HTTP headers

Zero

github

Experience email the way you want with Mail0 – the first open source email app that puts your privacy and safety first. Join the discord: https://mail0.link/discord

opencti

github

Open Cyber Threat Intelligence Platform

tutanota

github

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.

superagent

github

Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.

privacy.sexy

github

Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy

buttercup-desktop

github

:key: Cross-Platform Passwords & Secrets Vault

tamperchrome

github

Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).

varlock

github

AI-safe .env files: Schemas for agents, Secrets for humans.

metorial

github

Connect any AI model to 600+ integrations; powered by MCP 📡 🚀

express-rate-limit

github

Basic rate-limiting middleware for the Express web server

Chaterm

github

Open source AI terminal for cloud and infrastructure management, enabling you to deploy, troubleshoot, and automate services using natural language and intelligent agents.

creepjs

github

Creepy device and browser fingerprinting

accesscontrol

github

Role and Attribute based Access Control for Node.js