Harness-agnostic git shim for CLEO agent branch-protection (T1118)

WAFtester binary for Linux arm64

Claude-Code-style permission modes (ask / plan / auto) for the pi coding agent — with per-mode model profiles, outside-cwd write tracking, and per-mode skill filtering.

Enterprise-Grade Plug-and-Play Security SDK & WAF for Node.js/Express. Protects against DDoS, XSS, NoSQLi, SQLi, CSRF, and data leaks.

Hojamalo Scanner - real-time terminal web app security detection tool (crawl, subdomain enum, header/misconfig checks). Detection only, no exploitation.

A simple method that will strip a valid hex prefix off a string, if present.

Rust native HTTP client emulating real browser TLS handshakes.

A CDK construct that fronts an HTTP API with a CloudFront distribution and protects it with AWS WAF.

Enforce origin traffic via CloudFront.

Spectral ruleset for Zapier API Guidelines.

Compile ordinary TypeScript and JavaScript to small, fast native executables — no Node, no V8, no JavaScript engine in the binary

An ESLint® plugin that detects and mitigates security-related issues for DevExpress projects.

One command to install a production Web Application Firewall. Detects Node (Next.js / Express / Fastify), PHP (Laravel / Symfony), and Python (Django / FastAPI / Flask), installs the right Defenso SDK, wires the middleware, writes DEFENSO_TOKEN to .env. $

Make tsc-compiled `es2020/esnext` bundles compatible with esm/mjs requirements

An http(s).Agent implementation that block request Private IP address.

A wrapper around cURL-impersonate, a binary which can be used to bypass TLS fingerprinting.

Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth

Deploy the AWS WAF Automations

WAFtester binary for Windows x64

Hardened Pulumi baseline components for Cloudflare edge posture.