Pinned Loading

1. redteam-loop redteam-loop Public

   Automated red-team loop: OWASP-classified attacks → triage → Claude-proposed patch → verify the fix actually closes it. Human merges.

   JavaScript

2. security-assessments security-assessments Public

   Application-security assessments of self-hosted open-source tools: one confirmed SSRF (fixed + verified, disclosure in progress) and three documented judgment calls. AI-assisted method, human-verif…

3. provekit provekit Public

   Attack-tested security scanning for AI-generated code. Catches leaked secrets + OWASP-mapped insecure patterns. Zero deps. npx provekit

   JavaScript

4. tenant-isolation-postgres tenant-isolation-postgres Public

   Multi-tenant isolation in PostgreSQL: RLS row scope + a privileged-column trigger that closes the gap RLS cannot express + security-definer metering. 15 integration tests execute the attacks and as…

   JavaScript 1