CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
CVE monitoring for Magento / Adobe Commerce / Mage-OS. Polls KEV, NVD, GHSA, OSV, Packagist; filters against your composer.lock; alerts only P0/P1 to Slack.
AI agent that reviews code for bugs and security vulnerabilities across 5 languages, with RAG-grounded findings, suggested fixes, and plain-English explanations. LangGraph + Claude, deployed on AWS.
Zero Trust IAM simulator — JWT validation, RBAC/ABAC policy engine, contextual risk scoring, micro-segmented Docker networks, and live React dashboard. Built with FastAPI, Keycloak, PostgreSQL and React.
Quantum-ready, ephemeral financial data vault. Featuring TTL-based cryptographic decay, auto-burn primitives, and hardware-backed security for mission-critical financial lifecycle management.
Automated SOC2 compliance for Kubernetes. Scan, evidence, report.
"Production-grade AWS EKS platform"
Enterprise-grade AI-powered Security Operations Center (SOC) built with n8n for attack surface management, vulnerability scanning, threat intelligence, deterministic risk scoring, and AI-assisted security analysis.
An automated DevSecOps tool that leverages LangChain and Generative AI (LLMs) to ingest, analyze, and classify cyber threats from server access logs.
Open-source Terraform drift detection with auto-PR fixes, security scoring and cost delta
Security scanner for AI-generated code. Catches hallucinated dependencies via live PyPI/npm checks, 10 static vulnerability rules, and intent-drift detection. FastAPI + GitHub Action, validated against Flask/requests/express.js.
A high-performance Kubernetes security and observability stack powered by eBPF. Uses Cilium for kube-proxy-free networking and Falco for kernel-level threat detection.
Verifiable multi-ecosystem dependency gateway for connected, restricted, and air-gapped environments.
DevSecOps CI/CD pipeline utilizing GitHub Actions to implement automated security gates and continuous security scanning for application workflows.
Cloud DevSecOps Security Pipeline integrating GitHub Actions, Docker, Semgrep, Trivy, Checkov, Gitleaks, Terraform, and OWASP ZAP to demonstrate layered SDLC security controls.
PRISM analyzes GitHub pull requests, detects engineering risks, and gives developers actionable feedback before code reaches production.AI-powered GitHub Pull Request intelligence tool for code quality, security, testing, and engineering risk analysis.
An intelligent DevSecOps repository gatekeeper that uses Shannon Entropy and RegEx matrices to detect and block hardcoded secrets, API keys, and database tokens in local workflows before deployment tracking.
Add a description, image, and links to the devscops topic page so that developers can more easily learn about it.
To associate your repository with the devscops topic, visit your repo's landing page and select "manage topics."