Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
reddacted lets you analyze & sanitize your online footprint using LLMs, PII detection & sentiment analysis to identify anything that might reveal personal info you may not want correlated with your anonymous profile
Verified Entity Identity Lock (Expose hidden trust paths in your AWS IAM setup before they become security risks.)
Python CIS Benchmark auditor for Windows 10, Windows 11, and Windows Server, with security configuration checks and HTML/JSON compliance reports.
📊 Automate stock analysis from data collection to risk assessment and transaction reporting with this comprehensive workflow.
A practical project to harden an Ubuntu server using security best practices.
Network and domain security auditor scanning Windows Active Directory, Linux systems, and network infrastructure with AI-powered hardening guides and professional reporting.
High-assurance Compliance-as-Code framework, mapped to the Portuguese National Cybersecurity Reference Framework (QNRCS/CNCS) and EU NIS2 Directive. Includes the automated remediation engine.
🖼️ Generate and edit images using text with the Opencode Antigravity Image plugin, supporting multiple variations and consistent character rendering.
Architectural analysis and threat modeling of bag distribution mechanisms at Apple.
TestCardX is a professional-grade credit card testing & validation framework for payment gateway integration, security auditing, and QA. Features Luhn-valid generation, multi-country BIN database, batch processing, parallel execution, and multiple export formats For authorized testing only.
Reglet is a security-first compliance and infrastructure validation platform built on WebAssembly (Wasm). It enables engineering teams to define policy-as-code, execute validation checks in isolated sandboxed environments, and generate standardized audit artifacts (OSCAL/SARIF).
Personal SKILLS.md collection
DuskProbe is a web security testing framework that combines passive reconnaissance and active vulnerability scanning. Built with aiohttp and Streamlit, it identifies OWASP Top 10 risks and business logic flaws to provide coverage of modern web attack surfaces.
An Enterprise-grade multi-modal RAG application featuring domain-driven AI routing for automated source code vulnerability auditing, API payload analysis, and high-volume server log parsing.
🚀 Enhance your AI-assisted security workflows with plugins from the Trail of Bits Skills Marketplace for smarter analysis and testing.
Pre-ship audit skill for SaaS that takes money. Finds the billing and data-isolation holes generic scanners miss on Next.js + Supabase + Stripe.
🚀 Simplify engineering decisions and workflows with Antigravity Full Stack HQ, a comprehensive setup for Next.js, NestJS, TypeScript, Prisma, and Tailwind CSS.
It is a Reporting Tool made using VAPT and OSINT
To associate your repository with the security-auditing topic, visit your repo's landing page and select "manage topics."