Practical Defensive Engineering, Threat Modeling & Agentic AI Security Intelligence
🌐 Live Website • 📐 1,000+ AWS Architectures • 🛡️ 1,000+ Azure Architectures • 🧰 37k+ Tool Directory • 🧪 Hands-on Labs • 📝 Field Notes & Blog • ✨ Contribute a Tool
| Section | Focus & Capabilities | Direct Link |
|---|---|---|
| 📐 1,000+ AWS Best Practices | 1,032 architecture diagrams rendered with Obsidian Pele, verified OPA Rego policies, and Terraform modules across 24 AWS domains. | Explore AWS Architectures ↗ |
| 🛡️ 1,000+ Azure Best Practices | 1,032 architecture diagrams rendered with Obsidian Pele, verified OPA Rego policies, and Terraform modules across 24 Azure domains. | Explore Azure Architectures ↗ |
| 🧰 Security Tools Directory | Searchable database of 37,750+ open-source tools and frameworks across AI, cloud, and app defense. | Open Directory ↗ |
| 🧪 Hands-on Learning Labs | Guided labs covering agentic security, zero trust, STRIDE threat modeling, and network reconnaissance. | Browse Labs ↗ |
| 📝 Research & Field Notes | In-depth engineering teardowns, defensive architecture guides, and emerging threat analysis. | Read Field Notes ↗ |
⚡ Powered by Obsidian Pele: High-performance, zero-dependency SVG diagram rendering paired with Open Policy Agent (OPA) Rego guardrails and ready-to-deploy Terraform IaC modules.
The interactive catalog on cloudsecuritycorner.com/aws-architectures provides 1,032 distinct defensive patterns covering:
- 24 AWS Domains: Amazon S3, AWS IAM, Amazon VPC, Amazon EC2, Amazon RDS, Amazon DynamoDB, Amazon EKS, Amazon ECS, AWS Lambda, Amazon API Gateway, Amazon CloudFront, AWS WAF, AWS KMS, AWS CloudTrail, Amazon CloudWatch, Amazon GuardDuty, AWS Security Hub, AWS Backup, Amazon SQS/SNS, Amazon EventBridge, Amazon SageMaker, AWS Organizations, Amazon Route 53, and Amazon OpenSearch Service.
- Obsidian Pele SVG Engine: Rendered synchronously via obsidianmd/pele, delivering zero-lag, themeable vector graphics with dark/light mode CSS variable customization.
- OPA Rego Enforcement: Production policies enforcing each architecture pattern against Terraform plan JSON (
resource_changes) for automated CI/CD gating. - Terraform IaC: Full HCL definitions with security best practices, least-privilege tags, and CIS AWS Benchmark mappings.
⚡ Powered by Obsidian Pele: High-performance, zero-dependency SVG diagram rendering paired with Open Policy Agent (OPA) Rego guardrails and ready-to-deploy Terraform IaC modules.
The interactive catalog on cloudsecuritycorner.com/azure-architectures provides 1,032 distinct defensive patterns covering:
- 24 Azure Domains: Azure Blob Storage, Microsoft Entra ID, Azure Virtual Network (VNet), Azure Virtual Machines, Azure SQL Database, Azure Cosmos DB, Azure Kubernetes Service (AKS), Azure Container Apps, Azure Functions, Azure Application Gateway, Azure Front Door, Azure Firewall Premium, Azure Key Vault, Azure Activity Logs, Azure Monitor, Microsoft Defender for Cloud, Microsoft Sentinel SIEM, Azure Backup Vault, Azure Service Bus, Azure Event Grid, Azure OpenAI Service, Azure Policy, Azure DNS, and Azure Synapse Analytics.
- Official Azure Architecture Icons: Vector SVG icons rendered cleanly in multi-tier topologies with unique gradient namespacing to prevent cross-icon collisions.
- OPA Rego Enforcement: Rego policies validating Terraform plan JSON (
resource_changesforazurerm_*) against CIS Microsoft Azure Foundations Benchmark v2.0, NIST 800-53, and PCI-DSS v4.0. - Hardened Terraform IaC: Production-grade
azurerm_*modules enforcing encryption-at-rest, private endpoints, managed identities, and disaster recovery.
| # | Learning Path | Core Domain & Focus | Level | Guide |
|---|---|---|---|---|
| 01 | Agentic Cloud Security Essentials | AI Agent Threat Modeling, MCP Security & Sandboxing | Intermediate |
Start Lab ↗ |
| 02 | Zero Trust Architecture | Explicit Verification, Least Privilege & Micro-segmentation | Foundational |
Start Lab ↗ |
| 03 | Threat Modeling with STRIDE | Distributed Systems Risk Analysis & Mitigation Playbooks | Intermediate |
Start Lab ↗ |
| 04 | Security Engineering Fundamentals | Cryptography, Defense-in-Depth & Resilient Architecture | Foundational |
Start Lab ↗ |
| 05 | Ethical Hacker Practical Way | Reconnaissance, Surface Mapping & Exploitation Basics | Hands-on |
Start Lab ↗ |
| 06 | Nmap Practical Defense | Port Auditing, Service Fingerprinting & NSE Automation | Hands-on |
Start Lab ↗ |
- 📰 Safeguarding the AI Frontier: An In-Depth Analysis of Straiker's Revolutionary Security Solutions — Exploring runtime guardrails, prompt injection barriers, and autonomous agent monitoring.
Prerequisites: Elixir/OTP (>= 1.16) and Python 3.
# 1. Install Elixir dependencies
make setup
# 2. Run local development server (http://localhost:4000)
make dev
# 3. Regenerate README tool tables from priv/data/security-entries.json
make readme
# 4. Export static site for deployment
make export🌟 Automated Directory Sync: This curated showcase highlights 108 community-highlighted projects across 11 core security domains, automatically synchronized from
priv/data/security-entries.json. Search, filter, and inspect the complete database of 37,750 tools on cloudsecuritycorner.com/tools.
| Domain | Focus Area | Curated Count | Quick Jump |
|---|---|---|---|
| 🤖 Agentic & AI Security | AI agent guardrails, LLM red teaming, MCP security, sandboxing | 15 tools |
Browse ↓ |
| ☁️ Cloud & Container Security | Cloud security posture (CSPM), Kubernetes security, container runtime defense | 7 tools |
Browse ↓ |
| 🛡️ Application & Web Security | SAST, DAST, web scanners, API defense, WAFs | 26 tools |
Browse ↓ |
| 🔑 Identity, Access & Zero Trust | Authentication, authorization, IAM auditing, credential security | 7 tools |
Browse ↓ |
| 🔍 Vulnerability Assessment & Scanners | Vulnerability scanning, CVE intelligence, configuration auditing | 19 tools |
Browse ↓ |
| ⚔️ Penetration Testing & Exploitation | Penetration testing frameworks, exploit tooling, post-exploitation | 7 tools |
Browse ↓ |
| 📡 Network Security & Monitoring | Port scanning, traffic inspection, IDS/IPS, packet analysis | 3 tools |
Browse ↓ |
| 👁️ OSINT & Threat Intelligence | Threat intelligence sharing, IOC correlation, attack surface mapping | 5 tools |
Browse ↓ |
| 🚨 Incident Response & Forensics | Digital forensics, memory analysis, disk investigation, log analysis | 3 tools |
Browse ↓ |
| 🔐 Cryptography & Password Auditing | Password cracking, hash analysis, cryptographic verification | 13 tools |
Browse ↓ |
| 📚 Security Guidelines & Training | Security standards, verification guides, training academies | 3 tools |
Browse ↓ |
| 🌐 Full 37k+ Database | Real-time search, interactive filters & GitHub metadata | 37,750 tools |
Open Web Directory ↗ |
15 Curated Projects · AI agent guardrails, LLM red teaming, MCP security, sandboxing, and prompt evaluation.
🔗 Browse & search all Agentic & AI Security tools on the web directory ↗
| Project | Focus & Capabilities | Repository / Official Link |
|---|---|---|
| Agentic Radar | A security scanner that analyzes agentic workflows and visualizes tools, prompts, data flows, and potential security weaknesses. | splx-ai/agentic-radar |
| AI-Infra-Guard | A full-stack AI red-team platform for scanning agents, skills, MCP servers, AI infrastructure, and LLM jailbreak exposure. | Tencent/AI-Infra-Guard |
| AI-PASSWORD-TESTING-AGENT | An intelligent agent for testing password strength, identifying vulnerabilities, and exploring patterns in password creation. | insider77circle/ai-password-testing-agent |
| Garak | LLM vulnerability scanner probing hallucination, prompt injection, jailbreaks, data leakage, and toxic output. | NVIDIA/garak |
| Giskard | An open-source testing library for evaluating and red-teaming LLM agents, RAG systems, and multi-turn AI workflows. | Giskard-AI/giskard-oss |
| NeMo Guardrails | An open-source toolkit for adding programmable input, output, retrieval, dialog, and execution safeguards to AI applications. | NVIDIA-NeMo/Guardrails |
| OpenShell | A sandboxed runtime for autonomous agents with declarative policies for filesystem, network, and process access. | NVIDIA/OpenShell |
| OWASP Agentic Security Initiative | Community research, standards, threat models, and implementation guidance for securing autonomous agents and multi-step AI workflows. | Website ↗ |
| OWASP Secure Agent Playbook | An open playbook of practical security checks for AI agents, covering prompt injection, tool misuse, credential leakage, and busines... | OWASP/secure-agent-playbook |
| Promptfoo | Test-driven security evaluation and red-teaming tool for LLMs, prompts, RAG systems, and agentic workflows. | promptfoo/promptfoo |
| Promptmap | A prompt-injection scanner that automatically tests custom LLM applications for attack paths and unsafe instruction handling. | utkusen/promptmap |
| PurpleLlama | Meta's collection of evaluations and safeguards for assessing and improving generative AI security, including CyberSecEval, Prompt G... | meta-llama/PurpleLlama |
| PyRIT | Microsoft's Python Risk Identification Tool for automated generative AI red teaming and adversarial probing. | microsoft/PyRIT |
| SkillSpector | A security scanner for AI agent skills that detects prompt injection, unsafe behaviors, data exfiltration, and malicious patterns. | NVIDIA/skillspector |
| Snyk Agent Scan | Discovers agent components, MCP servers, and skills, then scans them for risks such as prompt injection, tool poisoning, and unsafe ... | snyk/agent-scan |
7 Curated Projects · Cloud security posture (CSPM), Kubernetes security, container runtime defense, and image scanning.
🔗 Browse & search all Cloud & Container Security tools on the web directory ↗
| Project | Focus & Capabilities | Repository / Official Link |
|---|---|---|
| Checkov | Static analysis for infrastructure as code that detects cloud misconfigurations, vulnerable dependencies, and exposed secrets. | bridgecrewio/checkov |
| Cnspec | Open-source cloud-native security and compliance scanner assessing Kubernetes, cloud accounts, and infrastructure as code. | mondoohq/cnspec |
| Docker Bench Security | Script that checks for dozens of common best-practices around deploying Docker containers in production. | docker/docker-bench-security |
| Falco | Cloud-native runtime security and behavioral threat detection engine for containers, Kubernetes, and Linux hosts. | falcosecurity/falco |
| SOPS | An editor for encrypted configuration files that integrates with cloud key services and keeps sensitive values protected in version ... | getsops/sops |
| Trivy | Comprehensive vulnerability, misconfiguration, secret, and SBOM scanner for containers, Kubernetes, and code repos. | aquasecurity/trivy |
| TruffleHog | Finds, verifies, and analyzes exposed credentials across source repositories, cloud storage, container images, and other data sources. | trufflesecurity/trufflehog |
26 Curated Projects · SAST, DAST, web scanners, API defense, WAFs, and software supply chain protection.
🔗 Browse & search all Application & Web Security tools on the web directory ↗
| Project | Focus & Capabilities | Repository / Official Link |
|---|---|---|
| Acunetix | A commercial tool focusing on web application vulnerability scanning, identifying issues such as SQL injection and XSS | Website ↗ |
| Arachni | A feature-rich, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate web a... | Arachni/arachn |
| Burp Suite | Industry-standard interactive proxy and automated vulnerability scanner for web application security assessments. | Website ↗ |
| detect-secrets | An extensible secret-detection tool that supports baseline files and pre-commit workflows to prevent new credentials from entering a... | Yelp/detect-secrets |
| DonPAPI | Automated remote credential dumper for Windows environments, extracting DPAPI secrets, browser credentials, certificates, and config... | login-securite/donpapi |
| Gitleaks | A fast secret scanner for detecting passwords, API keys, and tokens in Git history, files, and standard input. | gitleaks/gitleaks |
| HackBrowserData | Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux). | moond4rk/hackbrowserdata |
| jwt-hack | JSON Web Token Hack Toolkit | hahwul/jwt-hack |
| Kousei | Python/Go framework that generates SQL injection PoC requests, automates sqlmap attacks, and manages modular exploit scripts with pa... | nu11secur1ty/kousei |
| ModSecurity | Open-source web application firewall (WAF) providing HTTP traffic monitoring, logging, and real-time attack filtering. | owasp-modsecurity/ModSecurity |
| Nikto | Open-source web server scanner that tests for over 6,700 dangerous files, outdated server software, and version flaws. | sullo/nikto |
| OWASP | The Open Worldwide Application Security Project dedicated to improving software security with tools, documents, and communities. | Website ↗ |
| OWASP API Security Top 10 | Periodic consensus document on the most critical security risks facing modern web APIs and microservices. | OWASP/API-Security |
| OWASP ASVS | Application Security Verification Standard providing a basis for designing, building, and testing technical security controls. | OWASP/ASVS |
| OWASP Top Ten | Standard awareness document for developers and security teams representing the most critical risks to web applications. | Website ↗ |
| OWASP ZAP | World's most widely used free, open-source dynamic web application security scanner and penetration testing proxy. | zaproxy/zaproxy |
| PGP-Tools | Open-source browser extension for PGP encryption, decryption, and signing. Rust/WASM engine with WebAuthn PRF unlock, Argon2id passw... | am-i-being-pwned/pgp-tools |
| pwned | CLI tool to query the Have I Been Pwned API for breached accounts, pastes, and password exposure, enabling rapid security assessment... | wkovacs64/pwned |
| PwnedCheck | A command-line tool to check if passwords have been exposed in data breaches using the Have I Been Pwned (HIBP) API. | mohamedation/pwnedcheck |
| SANS Institute Training | Comprehensive cybersecurity training offering more than 60 courses across all practice areas including web security | Website ↗ |
| Sqlmap | Automatic SQL injection and database takeover tool supporting diverse database management systems. | sqlmapproject/sqlmap |
| Vega | An open-source web security scanner and testing platform to test the security of web applications | subgraph/Vega |
| W3af | An open-source web application security scanner that helps secure web applications by finding and exploiting all web application vul... | andresriancho/w3af |
| Wapiti | A web application vulnerability scanner that performs black-box scans to audit the security of web applications | wapiti-scanner/wap |
| Web Security Academy | A free online training center for web application security, including content from PortSwigger's in-house research team | Website ↗ |
| XSStrike | Advanced Cross-Site Scripting (XSS) detection suite equipped with an intelligent payload generation and context analysis engine. | s0md3v/XSStrike |
7 Curated Projects · Authentication, authorization, IAM auditing, credential security, and zero-trust boundary controls.
🔗 Browse & search all Identity, Access & Zero Trust tools on the web directory ↗
| Project | Focus & Capabilities | Repository / Official Link |
|---|---|---|
| ad-password-protection | Active Directory password filter featuring breached password checking and custom complexity rules | lithnet/ad-password-protection |
| gEnclave | Centralized, TPM 2.0 hardware-backed cryptographic identity enclave and multi-protocol bridge for Linux (FIDO2/CTAP2 WebAuthn Passke... | renich/genclave |
| Keycloak | An open-source identity and access management platform for authentication, federation, single sign-on, and fine-grained authorization. | keycloak/keycloak |
| linWinPwn | Bash script wrapping Active Directory tools for automated enumeration, vulnerability checks, exploitation, and password dumping via ... | lefayjey/linwinpwn |
| NetExec | Post-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows... | pennyw0rth/netexec |
| Scavenger | Crawler (Bot) searching for credential leaks on paste sites. | rndinfosecguy/scavenger |
| TeamPass | Collaborative Passwords Manager | nilsteampassnet/teampass |
19 Curated Projects · Vulnerability scanning, CVE intelligence, configuration auditing, and vulnerability management.
🔗 Browse & search all Vulnerability Assessment & Scanners tools on the web directory ↗
| Project | Focus & Capabilities | Repository / Official Link |
|---|---|---|
| Aircrack-ng | Complete suite of tools for assessing and testing WiFi network security, packet capture, and cryptographic cracking. | aircrack-ng/aircrack-ng |
| airgorah | Rust-based GUI tool for WiFi security auditing: captures traffic, discovers clients, performs deauthentication attacks, captures han... | martin-olivier/airgorah |
| cmdchamp | bash CLI trainer — 30 levels from ls to privilege escalation | mellen9999/cmdchamp |
| DefectDojo | Open-source vulnerability management and DevSecOps correlation platform offering reports, metrics, and CI integrations. | DefectDojo/django-DefectDojo |
| Hashcat | World's fastest and most advanced password recovery utility supporting hundreds of hash modes and multi-GPU acceleration. | hashcat/hashcat |
| hcxdumptool | Small tool to capture packets from wlan devices. | zerbea/hcxdumptool |
| hcxtools | A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper. | zerbea/hcxtools |
| John the Ripper | Fast offline password cracker supporting hundreds of hash and cipher types across multiple architectures. | openwall/john |
| Lynis | Battle-tested security auditing and compliance scanner for Linux, macOS, and Unix-based operating systems. | CISOfy/lynis |
| Mr.SIP | SIP Security Assessment Framework for VoIP Pentesters. Presented at DEFCON, BlackHat & Offzone. | meliht/mr.sip |
| Nmap | Network mapper and port scanner for network discovery, vulnerability detection, and service fingerprinting. | nmap/nmap |
| Nuclei | Fast and customizable vulnerability scanner based on community-powered YAML templates for automated testing. | projectdiscovery/nuclei |
| OpenVAS | Full-featured vulnerability scanner and management suite with daily-updated network vulnerability tests. | greenbone/openvas-scanner |
| pentoo-overlay | Gentoo overlay for security tools as well as the heart of the Pentoo Livecd | pentoo/pentoo-overlay |
| Qualys VMDR | Combines vulnerability scanning with AI-driven risk prioritization, ideal for large IT infrastructures | Website ↗ |
| sippts | Set of tools to audit SIP based VoIP Systems | pepelux/sippts |
| VMkatz | Extract Windows credentials directly from VM memory snapshots and virtual disks | nikaiw/vmkatz |
| wifi_db | Script to parse Aircrack-ng captures into a SQLite database and extract useful information like handshakes, MGT identities, interest... | r4ulcl/wifi_db |
| yellowkey-bitlocker | Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-202... | desireeontrial76/yellowkey-bitlocker |
7 Curated Projects · Penetration testing frameworks, exploit tooling, post-exploitation, and security distributions.
🔗 Browse & search all Penetration Testing & Exploitation tools on the web directory ↗
| Project | Focus & Capabilities | Repository / Official Link |
|---|---|---|
| hacktricks | Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches ... | hacktricks-wiki/hacktricks |
| impacket | Python library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for a... | fortra/impacket |
| Kali Linux | Industry-standard open-source Linux distribution for penetration testing, digital forensics, and security research. | Website ↗ |
| Metasploit | World's most widely used penetration testing framework for discovering, validating, and exploiting vulnerabilities. | rapid7/metasploit-framework |
| rules | Curated collection of Hashcat password-cracking rules with benchmark data, designed to help red teams and penetration testers crack ... | ibnaleem/rules |
| server | Hashtopolis - distributed password cracking with Hashcat | hashtopolis/server |
| voidsec-proxy | Multi-module offensive security toolkit for SOCKS5 proxy chaining, port scanning, DNS enumeration, hash cracking, reverse shell gene... | voidsecsoftwares/voidsec-proxy |
3 Curated Projects · Port scanning, traffic inspection, IDS/IPS, packet analysis, and perimeter security.
🔗 Browse & search all Network Security & Monitoring tools on the web directory ↗
| Project | Focus & Capabilities | Repository / Official Link |
|---|---|---|
| awesome-privacy | 🦄 A curated list of privacy & security-focused software and services | lissy93/awesome-privacy |
| Snort | Open-source network intrusion prevention and detection system capable of real-time packet logging and traffic analysis. | snort3/snort3 |
| Wireshark | World's foremost network protocol analyzer for deep packet inspection, traffic troubleshooting, and security analysis. | wireshark/wireshark |
5 Curated Projects · Threat intelligence sharing, IOC correlation, attack surface mapping, and reconnaissance.
🔗 Browse & search all OSINT & Threat Intelligence tools on the web directory ↗
| Project | Focus & Capabilities | Repository / Official Link |
|---|---|---|
| bramble | Local-first password manager with direct device-to-device sync | flythenimbus/bramble |
| cyclepatrol | Bash tool for on-foot Wi-Fi security checks in a loop, with evidence reports. (re-invented wifi WarDriving) | buybitart/cyclepatrol |
| MISP | Open-source threat intelligence platform for sharing, storing, and correlating Indicators of Compromise (IOCs). | MISP/MISP |
| SecLists | Curated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data... | danielmiessler/seclists |
| Shodan | Search engine for Internet-connected devices, industrial control systems, and open service infrastructure. | Website ↗ |
3 Curated Projects · Digital forensics, memory analysis, disk investigation, log analysis, and incident triage.
🔗 Browse & search all Incident Response & Forensics tools on the web directory ↗
| Project | Focus & Capabilities | Repository / Official Link |
|---|---|---|
| digital-forensics-lab | Free hands-on digital forensics labs for students and faculty | frankwxu/digital-forensics-lab |
| OSSEC | Open-source host-based intrusion detection system (HIDS) performing log analysis, rootkit detection, and file integrity monitoring. | ossec/ossec-hids |
| walletool | Extracts cryptocurrency private keys and addresses from wallet.dat files for Bitcoin and Litecoin, enabling wallet recovery and fore... | qg5casz/walletool |
13 Curated Projects · Password cracking, hash analysis, cryptographic verification, and WiFi assessment.
🔗 Browse & search all Cryptography & Password Auditing tools on the web directory ↗
| Project | Focus & Capabilities | Repository / Official Link |
|---|---|---|
| apm | A local password manager for everyone | aaravmaloo/apm |
| dpapi-toolkit | Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the ke... | crypt0p3g/dpapi-toolkit |
| GateX | FortinetHunter (@YogSoth0) binary cracking application. Part of CTF for FortinetHunter. ELF door: a stripped Nuitka onefile, an XOR-... | abraxas/gatex |
| GoFileX | Wordlist Bruteforcer for GoFile (gofile.io) Download Passwords | abraxas/gofilex |
| haiti | 🔑 Hash type identifier (CLI & lib) | noraj/haiti |
| HashcatRosetta | Hashcat rule analyzer and interpreter - A Rosetta Stone for decoding hashcat rule syntax | bandrel/hashcatrosetta |
| HashiCorp Vault | A secrets and encryption platform for centrally controlling access to credentials, keys, tokens, and privileged operations. | hashicorp/vault |
| hate_crack | A tool for automating cracking methodologies through Hashcat from the TrustedSec team. | trustedsec/hate_crack |
| john | John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operat... | openwall/john |
| Klip | Minimal terminal-based password manager | vid4l-07/klip |
| krakenhashes | Distributed password cracking platform coordinating GPU/CPU agents via Hashcat for high-speed hash recovery, with real-time job mana... | zerkereod/krakenhashes |
| SHA256-CDP | GPU-accelerated SHA-256 rainbow table implementation based on CDP (Cyclic Digit-sum Projection) structural analysis. AMD RX 9070 XT,... | jm00nj/sha256-cdp |
| sklad | Industrial-grade secure snippet warehouse for your system tray. 📦 Built with Rust (Tauri v2) & React. Offline-first, AES-256 encrypt... | rench321/sklad |
3 Curated Projects · Security standards, verification guides, training academies, and benchmark lists.
🔗 Browse & search all Security Guidelines & Training tools on the web directory ↗
| Project | Focus & Capabilities | Repository / Official Link |
|---|---|---|
| Cybrary | Online cybersecurity courses and training for individuals and teams, including certification preparation | Website ↗ |
| Paragonie Awesome AppSec | A curated list of resources for learning about application security, including books, websites, blog posts, and self-assessment quizzes | paragonie/awesome-appsec |
| TCM Security Academy | Practical, job-focused cybersecurity training designed by industry-leading instructors | Website ↗ |
Tip
Contributions from the security community are warmly welcomed!
- Add your project entry to
priv/data/security-entries.json:{ "title": "MySecurityTool", "link": "https://github.com/org/mysecuritytool", "description": "A concise 1-2 sentence description explaining what the tool secures, tests, or monitors.", "tag": "Agentic & AI Security", "github": "org/mysecuritytool" } - Run
make readme(orpython3 scripts/update_readme_tools.py) to refresh the tables. - Submit a Pull Request. GitHub Actions will validate the schema, rebuild the table, and export the site.