CVE monitoring for Magento / Adobe Commerce / Mage-OS. Polls KEV, NVD, GHSA, OSV, Packagist; filters against your composer.lock; alerts only P0/P1 to Slack.
AI agent that reviews code for bugs and security vulnerabilities across 5 languages, with RAG-grounded findings, suggested fixes, and plain-English explanations. LangGraph + Claude, deployed on AWS.
Quantum-ready, ephemeral financial data vault. Featuring TTL-based cryptographic decay, auto-burn primitives, and hardware-backed security for mission-critical financial lifecycle management.
Zero Trust IAM simulator — JWT validation, RBAC/ABAC policy engine, contextual risk scoring, micro-segmented Docker networks, and live React dashboard. Built with FastAPI, Keycloak, PostgreSQL and React.
Automated SOC2 compliance for Kubernetes. Scan, evidence, report.
"Production-grade AWS EKS platform"
Enterprise-grade AI-powered Security Operations Center (SOC) built with n8n for attack surface management, vulnerability scanning, threat intelligence, deterministic risk scoring, and AI-assisted security analysis.
An automated DevSecOps tool that leverages LangChain and Generative AI (LLMs) to ingest, analyze, and classify cyber threats from server access logs.
Security scanner for AI-generated code. Catches hallucinated dependencies via live PyPI/npm checks, 10 static vulnerability rules, and intent-drift detection. FastAPI + GitHub Action, validated against Flask/requests/express.js.
Security scanner for MCP servers and AI agents. Detects prompt injection in tool descriptions, tool poisoning, rug pulls, supply-chain risk and the lethal trifecta. Pins tool definitions to a lockfile and enforces it at runtime. SARIF + CycloneDX AIBOM. Zero dependencies.
A high-performance Kubernetes security and observability stack powered by eBPF. Uses Cilium for kube-proxy-free networking and Falco for kernel-level threat detection.
REST API over a real MySQL hospital schema, Dockerized and shipped through a GitHub Actions pipeline gated by SHA-pinned Trivy vulnerability scanning.
Open-source software assurance platform that turns deterministic analysis, security evidence, system graphs, policy checks, and Assurance Cases into explainable release decisions. Build → Inspect → Prove → Ship.
Verifiable multi-ecosystem dependency gateway for connected, restricted, and air-gapped environments.
Open-source Terraform drift detection with auto-PR fixes, security scoring and cost delta
DevSecOps CI/CD pipeline utilizing GitHub Actions to implement automated security gates and continuous security scanning for application workflows.
Cloud DevSecOps Security Pipeline integrating GitHub Actions, Docker, Semgrep, Trivy, Checkov, Gitleaks, Terraform, and OWASP ZAP to demonstrate layered SDLC security controls.
PRISM analyzes GitHub pull requests, detects engineering risks, and gives developers actionable feedback before code reaches production.AI-powered GitHub Pull Request intelligence tool for code quality, security, testing, and engineering risk analysis.
To associate your repository with the devscops topic, visit your repo's landing page and select "manage topics."