Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about security. Get started for free in under 2 minutes, playing right from your browser.
Claude Code skill for OWASP security best practices (2025-2026). Includes Top 10:2025, ASVS 5.0, Agentic AI security, and 20+ language-specific security quirks.
Additional Resources For Securing The Stack Tutorials
Web Application Pentesting Lab with over 40 plus vulnerability, which covers all the owasp top 10 issues.
A client-side web security tool that sanitizes potentially malicious HTML and JavaScript input by stripping unsafe tags and event attributes. Designed to demonstrate XSS prevention concepts, safe input handling, and frontend security practices using pure HTML, CSS, and JavaScript in a beginner-friendly interface.
This extension helps bug bounty hunters and recon specialists quickly search for archived URLs of any domain using the Wayback Machine. One click, instant access to historical data that might expose forgotten paths, juicy parameters, or legacy vulnerabilities.
Chrome/Edge extension performs structural, security and developer analysis of any webpage, presenting scores with actionable insights.
SafeMarkdown — Editor with XSS Protection. A web application that accepts Markdown markup, parses it, and renders it safely.
⚡ An AI-enhanced code analysis platform — detects and auto-fixes Security, Performance, Quality, Syntax & Logic issues across JavaScript, TypeScript, Python, Java, and SQL using 26+ rules. Supabase backend · OpenAI GPT insights · Docker-ready · Sub-2s results.
AI-powered DevSecOps platform for vulnerability detection, deployment protection, and intelligent security analysis.
A CLI tool that processes @pre, @post, and @invariant tags in functions, classes, and methods within a source file. It generates a modified version of the source code that automatically validates input conditions (@pre), result conditions (@post), and invariant conditions (@invariant).
THE MODONOME Project - Governed engineering autonomy
A cybersecurity-themed personal portfolio built with vanilla web technologies. This isn't just a résumé — it's a demonstration of my engineering philosophy: secure by design, performant by default, beautiful by intention.
AI-assisted DevSecOps security lab using GitHub Copilot, GitHub CodeQL, and Advanced CodeQL workflows for vulnerability detection, remediation, and secure software development validation.
JS Project Secrets Management and Isolation
CRUXIDE is a track-based developer experience for VS Code that brings curated tooling, AI skills, engineering rules, code review guidance, and orchestration into one secure workspace.
MayaSec is a lightweight, zero-config JavaScript SDK that adds an invisible security layer to any website. It silently monitors user behavior, fingerprints devices, detects bots, and blocks attacks like SQL Injection - all from the browser, without touching your backend code.
Portable, vendor-neutral engineering agent skills (SKILL.md) for AI coding agents: architecture, OWASP security, test strategy, release safety, SRE, compliance. MIT.
Before/after security hardening of an AI-generated Supabase SaaS. 19 findings: service-role key in the browser, no row level security, broken object-level authorization, public storage bucket. Exploit tests on both branches, demonstrating each hole then proving it closed.
A RESTful API built using Express.js and LDAP.js for managing user authentication and directory services.
To associate your repository with the secure-coding topic, visit your repo's landing page and select "manage topics."