Enterprise-ready MCP Gateway & Registry that centralizes AI development tools with secure OAuth authentication, dynamic tool discovery, and unified access for both autonomous AI agents and AI coding assistants. Transform scattered MCP server chaos into governed, auditable tool access with Keycloak/Entra integration.

Halberd : Multi-Cloud Agentic Attack Tool

A collection of Microsoft cloud product logos

Security tools for purple team, AI security, and M365/GWS. Authorized use only.

A simple chat application that integrates Microsoft Entra ID for user authentication. Designed for deployment on Azure Container Apps with the Azure Developer CLI.

Free, open-source Microsoft 365 security assessment tool. Evaluates 23 findings, auto-remediates with rollback, generates professional reports, and simulates attack chains. Windows, local, no data leaves your machine.

Flask extension for authenticating and authorising requests using the Entra identity platform.

This python script performs a number of sqlite queries (mainly password metadata) against sqlite databases (Created by ROADtools) to provide analysis of account password hygene based on metadata.

Sample to configure Amazon Q Business Identity-Aware APIs with AWS IAM Identity Center Trusted Token Propagation

Patching Bloodhound CE for Owned and PtH Attacks

Modular FastAPI-based API gateway for OpenAI compatible APIs.

Oauth2 on Azure Entra ID demonstrated with client and server FastAPI applications in Python. The server is deployed to Azure Web Apps via a GitHub Actions Workflow script. Client utilizes OIDC with authorization code flow.

Password Spraying and User Enumeration Against "Entra ID" with Tor Proxy Supporting to avoid False Positive

Audit log analyzer for Microsoft Purview

Salesforce Meta Tool (MCP Server) with end-to-end identity propagation via On-Behalf-Of (JWT Bearer) flow through Azure AI Foundry and APIM

🔥🔥🔥 Synchronize users from various HR systems with TimeCamp

AI-powered Microsoft Entra ID security auditor — Cybersteps Module 3 (Azure AI) capstone project. GPT-4o + Microsoft Graph; 4 of 6 EntraGoat scenarios detected.

Executable architecture workbench — model, validate, and visualize infrastructure systems as code

Read-only Microsoft 365 / Entra ID posture reporting via Microsoft Graph — Python CLI with tests and CI

A comprehensive Prefect 3.x workflow orchestration project for security automation, asset management, and vulnerability assessment. This repository contains production-ready flows for integrating with various security tools and platforms.