CVE monitoring for Magento / Adobe Commerce / Mage-OS. Polls KEV, NVD, GHSA, OSV, Packagist; filters against your composer.lock; alerts only P0/P1 to Slack.
🔍 Evidence-based web security scanner for your own sites zero dependency Node.js CLI with AI-assisted analysis
AI agent that reviews code for bugs and security vulnerabilities across 5 languages, with RAG-grounded findings, suggested fixes, and plain-English explanations. LangGraph + Claude, deployed on AWS.
Quantum-ready, ephemeral financial data vault. Featuring TTL-based cryptographic decay, auto-burn primitives, and hardware-backed security for mission-critical financial lifecycle management.
Zero Trust IAM simulator — JWT validation, RBAC/ABAC policy engine, contextual risk scoring, micro-segmented Docker networks, and live React dashboard. Built with FastAPI, Keycloak, PostgreSQL and React.
Automated SOC2 compliance for Kubernetes. Scan, evidence, report.
"Production-grade AWS EKS platform"
Enterprise-grade AI-powered Security Operations Center (SOC) built with n8n for attack surface management, vulnerability scanning, threat intelligence, deterministic risk scoring, and AI-assisted security analysis.
PRISM analyzes GitHub pull requests, detects engineering risks, and gives developers actionable feedback before code reaches production.AI-powered GitHub Pull Request intelligence tool for code quality, security, testing, and engineering risk analysis.
A high-performance Kubernetes security and observability stack powered by eBPF. Uses Cilium for kube-proxy-free networking and Falco for kernel-level threat detection.
Security scanner for AI-generated code. Catches hallucinated dependencies via live PyPI/npm checks, 10 static vulnerability rules, and intent-drift detection. FastAPI + GitHub Action, validated against Flask/requests/express.js.
Security scanner for MCP servers and AI agents. Detects prompt injection in tool descriptions, tool poisoning, rug pulls, supply-chain risk and the lethal trifecta. Pins tool definitions to a lockfile and enforces it at runtime. SARIF + CycloneDX AIBOM. Zero dependencies.
An automated DevSecOps tool that leverages LangChain and Generative AI (LLMs) to ingest, analyze, and classify cyber threats from server access logs.
Open-source software assurance platform that turns deterministic analysis, security evidence, system graphs, policy checks, and Assurance Cases into explainable release decisions. Build → Inspect → Prove → Ship.
REST API over a real MySQL hospital schema, Dockerized and shipped through a GitHub Actions pipeline gated by SHA-pinned Trivy vulnerability scanning.
Open-source Terraform drift detection with auto-PR fixes, security scoring and cost delta
Which dependency vulnerabilities can your Python code actually reach? Evidence-backed reachability with Meta's Muse Spark, verified call paths and OpenVEX output. Built for the Meta Global AI Developer Hackathon.
Verifiable multi-ecosystem dependency gateway for connected, restricted, and air-gapped environments.
To associate your repository with the devscops topic, visit your repo's landing page and select "manage topics."