interactive threat modelling DSL

Pup — AI-native, evidence-based AppSec: contextual SAST, reachability SCA, threat modelling, and secrets for JavaScript/TypeScript, Python, Java/Kotlin, Go, Ruby, PHP, and C#.

The secure gateway for AI tools. Sits between AI assistants (Claude, Cursor) and MCP servers, providing static analysis, threat modelling, policy enforcement, consent, and audit.

American-spelling alias for @threat-modelling/open-threat-database. Re-exports the canonical (British-spelling) package — see that package for the actual library and source.

An open, structured database of cyber security threats with STRIDE, MITRE ATT&CK and CWE mappings, plus mitigating controls and authoritative references.

No description provided.

OCI NodeJS client for Threat Intelligence Service

Find geolocation data from IP addresses (e.g. city, country, timezone) using the IPLocate.io API

IP2Proxy proxy detection component

Open detection standard -- like Sigma, but for AI agents. 751 rules for prompt injection, tool poisoning, context exfiltration, and MCP attacks. Shipped in Cisco AI Defense. 97.2% recall on NVIDIA garak.

All documentation is located at: https://aws.github.io/aws-pdk

A set of 3D modelling functions for gs-JSON.

Threat-response primitives for noy-db — multi-attempt lockout, duress-secret data destruction, duress-secret honeypot decoy. Pure stateful helpers; the caller coordinates keyring + audit-ledger integration. Part of the @noy-db/on-* authentication family.

Simple model part for custom mvc over express/connect routes.

OWASP Threat Dragon core module

Safe replacement for the v-html directive

Thin wrapper around agent-threat-rules — re-exports all detection logic for monorepo consumers.

Bootstrap security-review-mcp for AI IDEs and CLI tools

Encrypted model attributes in your favourite ORM.

AI Manipulation Defense System (AIMDS) with self-learning, prompt injection detection, and vector search integration