api-security

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Metlo is an open-source API security platform.

How to implement Step-up Authentication using Amazon Cognito

Secure NestJs Rest API with Keycloak

AI agent browser for web reverse engineering

AI Red Team Operations Console

Protocol specification and Node library designed to make building APIs that use HMAC signatures simple

Qiuth transforms standard bearer API keys into proof-of-possession tokens, using multi-factor security layers like IP validation, TOTP, and certificate validation to prevent unauthorized access even if your key is leaked.

TrustOS is an AI Permission Layer that sits between AI agents and real-world actions.

Lightweight and customizable Express.js rate limiter with flexible rules, middleware support, and production-ready protection against spam and abuse.

Next.js security middleware with Redis-backed threat scoring, honeypot decoy routing, and Python ML engine for advanced detection.

Distributed adaptive rate limiting system with abuse detection using Redis and Lua. Dynamically throttles and blocks malicious traffic in real time.

Standalone edge protection sensor and fleet management platform

Production-grade NestJS boilerplate for regulated industries. Features JWT RS256 with rotation, DB-driven RBAC, Drizzle ORM, and append-only Audit Logging. Security-first architecture for Fintech and Healthtech.

Express middleware for creating APIs that implement hmac signatures

Advanced rate limiting module for NestJS with PostgreSQL persistence, progressive penalties, and admin management.

Node.js/Express backend for SymptomPulse. Manages symptom/medication data, integrates Open FDA API, and handles JWT authentication. Built with TypeScript, MySQL, and Prisma ORM for robust data modeling.

A scalable Express/TypeScript auth microservice utilizing Prisma, PostgreSQL, and Redis. It features BullMQ for asynchronous task processing, Zod for strict type-safe validation, and robust multi-device session management.

MCP server that lets LLMs drive HTTPToolkit for automated API security testing — replay, mutation, and audit on captured mobile, desktop, and CLI traffic