Protect modern web applications from inspection, tampering, and unauthorized access through real-time detection, checksum enforcement, and customizable response strategies. Monitor developer tools, block key combinations, freeze console output, and enforc

Cookies, optionally signed using Keygrip.

Makes it easy to generate and verify messages which are signed to prevent tampering

Native-first mobile security for React Native: anti-tampering, root/jailbreak detection, SSL pinning

Detect DOM tampering, DevTools access, and JS variable modifications

A Node.js native addon for detecting various types of camera sabotage including defocus, blackout, covered camera, flash, and scene tampering

A lightweight Axios interceptor that automatically adds signature authentication (HMAC-SHA1/SHA256/SHA512, MD5, etc.) to outgoing requests. Protect your API with data integrity and anti‑tampering mechanisms.

Bot detection for JavaScript and Node.js: detect headless Chrome, Playwright, Puppeteer, Selenium and scripted input. Simple isHuman() API plus weighted instant, behavioral, and server signals (IP, TLS/JA3, timezone). No API keys.

Supply chain integrity checker for Claude Code plugins. Verifies installed plugins against their source repos for tampering, version drift, repo deletion, and tool definition changes.

cookie session middleware

For hardened libraries, regardless of hardened environments

Security scanner for AI coding agents — test your setup against prompt injection, credential exposure, identity tampering, and more.

Object encoding and decoding utils

Role-based permissions for AngularJS

A lightweight React Native library to detect if Developer Options or USB Debugging are enabled on an Android device. It helps developers prevent tampering, improve app security, or show custom warnings or actions (like dialogs or redirects) when Developer

`lavamoat` is a NodeJS runtime where modules are defined in [SES][SesGithub] Compartments. It aims to reduce the risk of malicious code in the app dependency graph, known as "software supply chain attacks".

Layer-1 crypto primitive for the Xema OS credential broker. Seals an opaque credential payload into an audience-bound, short-lived (TTL ≤ 60s) JWE (`dir` + `A256GCM`) bound to a credentialBindingId + inputHash + correlationId, and unseals it with audience

Jscrambler Code Integrity API client.

Role based permissions for Angular v2++

A professional watermark plugin for frontend applications - supports global and local watermarking with anti-tampering protection