{"data":[{"slug":"trivy","name":"Trivy","tagline":"Apache-2.0 all-in-one vuln/IaC/secret/SBOM scanner; no paid tier","category":"devops","url":"https://trivy.dev","github":"https://github.com/aquasecurity/trivy","pricing":"open-source","hook":"Trivy is the single binary that scans images, repos, IaC, and K8s when stitching four scanners is the tax.","whatsGood":"Apache-2.0. CVE vuln scan, misconfig, secrets, licenses, SBOM. Targets: containers, filesystems, git, Terraform/CloudFormation/Dockerfiles, Kubernetes. Default scanner in GitLab/Harbor/Artifact Hub. No feature gate on the CLI.","theCatch":"CLI/CI scanner — not Aqua Platform management UI/RBAC/policy SaaS. Vs Grype/Snyk: Aqua OSS default with broad target surface; Aqua Inc monetizes a separate commercial platform. You still triage and patch.","verdict":"Apache-2.0 security scanner. Fully free CLI; Aqua Platform is the paid cousin.","addedAt":"2026-09-04","featured":false,"domain":"DevOps","subSpecialty":"Security","subcategory":"Security","tags":["self-host","permissive","security","kubernetes","active"],"capabilities":["vuln","iac","sbom"],"surfaces":["Self-host"],"ecosystem":["Multi-platform","Go"],"licenseModel":"Apache-2.0","githubStars":38501,"starsPerWeek":98,"access":"free","archived":false,"repo":{"createdAt":"2019-04-11","pushedAt":"2026-10-16","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/trivy","html":"/gems/trivy","markdown":"/gems/trivy.md"}},{"slug":"cosign","name":"Cosign","tagline":"Apache-2.0 Sigstore keyless container/artifact signing CLI","category":"devops","url":"https://docs.sigstore.dev/cosign/signing/overview/","github":"https://github.com/sigstore/cosign","pricing":"open-source","hook":"Cosign is keyless OCI signing when long-lived Notary keys are the supply-chain liability.","whatsGood":"Apache-2.0. Sign/verify containers and blobs; store signatures beside digests in the registry. Keyless via Fulcio OIDC + Rekor transparency log. Also key-pair/KMS. CI-native cosign sign/verify.","theCatch":"Signing CLI + public-good Sigstore infra — not a full policy admission controller (pair with Kyverno/OPA). Offline/air-gap needs different PKI. Registry must support referrers/OCI artifacts cleanly.","verdict":"Apache-2.0 Sigstore signing. Free CLI; policy engines are separate.","addedAt":"2026-09-04","featured":false,"domain":"DevOps","subSpecialty":"Security","subcategory":"Security","tags":["cli","self-host","permissive","containers","active"],"capabilities":["signing","supply-chain","cli"],"surfaces":["CLI","Self-host"],"ecosystem":["Multi-platform","Go"],"licenseModel":"Apache-2.0","githubStars":6370,"starsPerWeek":21,"access":"free","archived":false,"repo":{"createdAt":"2021-02-04","pushedAt":"2026-10-16","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/cosign","html":"/gems/cosign","markdown":"/gems/cosign.md"}},{"slug":"gitleaks","name":"Gitleaks","tagline":"MIT secret scanner for git/dirs/stdin; CLI free, org Action needs free key","category":"devops","url":"https://gitleaks.io","github":"https://github.com/gitleaks/gitleaks","pricing":"open-source","hook":"Gitleaks is the regex-first secrets detector when Trivy secrets are one of many scanners and you want git-history depth.","whatsGood":"MIT CLI. Scan git history, directories, stdin. Pre-commit hook + GitHub Action. Huge rule set for API keys/tokens. No SaaS seat tax on the binary. ~29k stars, battle-tested in CI.","theCatch":"Maintainer marks feature-complete (security patches; focus shifting to Betterleaks). Official Action for GitHub org repos needs a free license key from gitleaks.io — personal accounts exempt. Not a full ASVS/SAST suite. False positives need allowlists.","verdict":"MIT secrets CLI. Free forever; org Action wants free license key.","addedAt":"2026-09-04","featured":false,"domain":"DevOps","subSpecialty":"Security","subcategory":"Security","tags":["cli","self-host","permissive","security","git","active"],"capabilities":["secrets","ci","git"],"surfaces":["CLI","Self-host","Hosted"],"ecosystem":["Multi-platform","Go"],"licenseModel":"OSS/MIT","githubStars":30103,"starsPerWeek":66,"access":"free","archived":false,"repo":{"createdAt":"2018-01-27","pushedAt":"2026-09-30","license":"MIT","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/gitleaks","html":"/gems/gitleaks","markdown":"/gems/gitleaks.md"}},{"slug":"grype","name":"Grype","tagline":"Apache-2.0 SBOM-first vulnerability scanner from Anchore; free CLI","category":"devops","url":"https://anchore.com/grype/","github":"https://github.com/anchore/grype","pricing":"open-source","hook":"Grype is vuln matching against SBOMs when Trivy is the all-in-one and you already emit Syft/SPDX/CycloneDX.","whatsGood":"Apache-2.0. Scan images, dirs, or SBOMs; pairs with Syft (generate once, rescan often). Offline DB after download. Transparent matching logic. No feature gate on the CLI.","theCatch":"Vuln scanner — not Trivy's IaC/secrets swiss-army, not Cosign signing, not Anchore Enterprise governance UI. You still triage CVEs. Anchore monetizes Enterprise separately.","verdict":"Apache-2.0 SBOM vuln scanner. Free CLI; Enterprise is the paid cousin.","addedAt":"2026-09-04","featured":false,"domain":"DevOps","subSpecialty":"Security","subcategory":"Security","tags":["cli","self-host","local-first","permissive","security","active"],"capabilities":["vuln","sbom","ci"],"surfaces":["CLI","Self-host"],"ecosystem":["Multi-platform","Go"],"licenseModel":"Apache-2.0","githubStars":13045,"starsPerWeek":39,"access":"free","archived":false,"repo":{"createdAt":"2020-05-26","pushedAt":"2026-10-16","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/grype","html":"/gems/grype","markdown":"/gems/grype.md"}},{"slug":"anubis","name":"Anubis","tagline":"MIT PoW challenge layer vs AI scrapers in front of Caddy/Traefik","category":"devops","url":"https://anubis.techaro.lol","github":"https://github.com/TecharoHQ/anubis","pricing":"open-source","hook":"Anubis sits in front of your reverse proxy and makes scrapers pay SHA-256 before the origin does.","whatsGood":"MIT. Go binary proof-of-work gate for Caddy/Traefik/nginx-style frontends. Policy allowlists for good bots. Docs at anubis.techaro.lol.","theCatch":"PoW slows mass scrapers; determined headless solvers still pass. Can impede Archive/RSS unless you allowlist. Not Cloudflare WAF. Distinct from Traefik/Caddy proxies.","verdict":"MIT anti-scraper PoW layer. Free forever; tune policies.","addedAt":"2026-09-07","featured":false,"domain":"DevOps","subSpecialty":"Security","subcategory":"Security","tags":["self-host","permissive","scraping","active"],"capabilities":["proxy","pow","anti-scraper"],"surfaces":["Self-host"],"ecosystem":["Go","Multi-platform"],"licenseModel":"OSS/MIT","githubStars":23522,"starsPerWeek":283,"access":"free","archived":false,"repo":{"createdAt":"2025-03-17","pushedAt":"2026-10-19","license":"MIT","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/anubis","html":"/gems/anubis","markdown":"/gems/anubis.md"}},{"slug":"direnv","name":"direnv","tagline":"MIT per-directory env loader for any shell","category":"devops","url":"https://direnv.net","github":"https://github.com/direnv/direnv","pricing":"open-source","hook":"direnv loads and unloads .envrc when you cd — project secrets stay out of your global profile.","whatsGood":"MIT. Works with bash/zsh/fish/etc, pairs with asdf/mise, stdlib helpers, deny-by-default allow.","theCatch":"Each new .envrc needs `direnv allow`. Not a secrets vault — still files on disk.","verdict":"MIT directory env. Free forever; allow once per project and stop polluting $PATH.","addedAt":"2026-09-07","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Security","tags":["self-host","permissive","security","active"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"OSS/MIT","githubStars":15508,"starsPerWeek":19,"access":"free","archived":false,"repo":{"createdAt":"2011-01-04","pushedAt":"2026-10-12","license":"MIT","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/direnv","html":"/gems/direnv","markdown":"/gems/direnv.md"}},{"slug":"age","name":"age","tagline":"BSD-3 simple file encryption by FiloSottile","category":"devops","url":"https://age-encryption.org","github":"https://github.com/FiloSottile/age","pricing":"open-source","hook":"age encrypts files with small explicit keys — the modern successor people reach for instead of GPG.","whatsGood":"BSD-3-Clause. Tiny CLI + Go library, recipient keys, passphrase mode, works great under SOPS.","theCatch":"Not a password manager or key directory. You still distribute public keys yourself.","verdict":"BSD-3 file encryption. Free forever; pair with SOPS when the team outgrows ad-hoc scripts.","addedAt":"2026-09-07","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Security","tags":["self-host","permissive","security","active"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"BSD-3-Clause","githubStars":23969,"starsPerWeek":62,"access":"free","archived":false,"repo":{"createdAt":"2019-05-18","pushedAt":"2026-08-29","license":"BSD-3-Clause","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/age","html":"/gems/age","markdown":"/gems/age.md"}},{"slug":"atuin","name":"Atuin","tagline":"MIT magical shell history with optional E2E sync","category":"devops","url":"https://atuin.sh","github":"https://github.com/atuinsh/atuin","pricing":"open-source","hook":"Atuin replaces Ctrl-R with searchable, context-rich shell history — sync encrypted if you want.","whatsGood":"MIT Rust CLI. SQLite history with exit code, duration, cwd. Works across bash/zsh/fish/etc. Optional end-to-end encrypted sync via hosted server or self-hosted `atuin-server`. Local-only mode needs no account.","theCatch":"Shell history tool — not a prompt (Starship), not a jumper (zoxide), not Dotfiles sync. Desktop/Hub team features are a separate product line (Hub not self-hostable). Atuin AI is free while in testing — treat that as temporary.","verdict":"MIT shell history. Free forever CLI + self-host sync; hosted sync stays optional.","addedAt":"2026-09-08","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Security","tags":["self-host","permissive","security","testing","active"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"OSS/MIT","githubStars":32025,"starsPerWeek":102,"access":"free","archived":false,"repo":{"createdAt":"2020-10-04","pushedAt":"2026-10-17","license":"MIT","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/atuin","html":"/gems/atuin","markdown":"/gems/atuin.md"}},{"slug":"sops","name":"SOPS","tagline":"MPL-2.0 encrypts config values; keys stay readable","category":"devops","url":"https://getsops.io","github":"https://github.com/getsops/sops","pricing":"open-source","hook":"SOPS is git-friendly secrets for YAML/JSON/dotenv — encrypt values, leave keys visible, decrypt in CI.","whatsGood":"MPL-2.0. CNCF sandbox. Works with age, PGP, and cloud KMS (AWS/GCP/Azure/Vault and friends). Structure-preserving so diffs stay reviewable. Pairs cleanly with age keys for offline teams. Offline + online identity modes.","theCatch":"Vs age (file encryption) and Infisical (secrets product): SOPS is the *structured config encryptor*, not a password manager and not a hosted vault UI. You still design key distribution, rotation, and who can decrypt in CI. Binary mode encrypts whole files when structure does not apply.","verdict":"MPL-2.0 secrets-in-git. Free forever; use age underneath when you want KMS-free recipients.","addedAt":"2026-09-09","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Security","tags":["self-host","local-first","copyleft","security","git","active"],"capabilities":["ci"],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"MPL-2.0","githubStars":23435,"starsPerWeek":40,"access":"free","archived":false,"repo":{"createdAt":"2015-08-13","pushedAt":"2026-10-13","license":"MPL-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/sops","html":"/gems/sops","markdown":"/gems/sops.md"}},{"slug":"semgrep","name":"Semgrep","tagline":"LGPL-2.1 SAST engine; Free Edition caps repos/contributors","category":"devops","url":"https://semgrep.dev","github":"https://github.com/semgrep/semgrep","pricing":"open-source","hook":"Semgrep is pattern-based static analysis when you want fast custom rules and a real $0 Free Edition to start.","whatsGood":"LGPL-2.1 engine. Run locally/in your CI so source can stay off Semgrep servers. Huge rule ecosystem, custom patterns, IDE plugins. Free Edition is a real $0 SaaS start (Code + Supply Chain) with Pro engine/rules called out on pricing — up to 10 private repos and 10 contributors per semgrep.dev/pricing.","theCatch":"Vs Trivy/Gitleaks (scanners): Semgrep is SAST/SCA-shaped AppSec, not container CVE inventory or git-history secret regex alone. Teams starts ~$30/contributor/mo per product; Secrets is a separate SKU. Free Edition caps contributors/repos — OSS CLI without the SaaS seat is the uncapped escape hatch.","verdict":"LGPL SAST. Free forever CLI; Free Edition SaaS for small teams; Teams when AppSec wants the paid platform.","addedAt":"2026-09-09","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Security","tags":["self-host","local-first","copyleft","security","active"],"capabilities":[],"surfaces":["Self-host","Hosted"],"ecosystem":["Multi-platform"],"licenseModel":"LGPL-2.1","githubStars":17124,"starsPerWeek":48,"access":"free","archived":false,"repo":{"createdAt":"2019-12-13","pushedAt":"2026-10-19","license":"LGPL-2.1","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/semgrep","html":"/gems/semgrep","markdown":"/gems/semgrep.md"}},{"slug":"restic","name":"restic","tagline":"BSD-2-Clause encrypted, deduplicated backups to many backends","category":"devops","url":"https://restic.net","github":"https://github.com/restic/restic","pricing":"open-source","hook":"restic is the backup binary when “rsync to a folder” stopped being a strategy and you need encrypted snapshots you can actually restore.","whatsGood":"BSD-2-Clause. restic/restic. Client-side encryption, dedup, snapshots across local/S3/SFTP and other backends. Single static-ish Go binary for Linux/macOS/Windows. Docs at restic.readthedocs.io. Free forever — no license server.","theCatch":"You still own the repository password (lose it = lose data) and the backend bill/ops. Not a SaaS backup console with support SLAs. Scheduling, monitoring, and restore drills are on you. Complementary to object stores (Garage), not a replacement for app-level PITR.","verdict":"BSD-2-Clause backup CLI. Free forever encryption + dedup; pay only for where the blobs live.","addedAt":"2026-09-11","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Security","tags":["self-host","permissive","security","active"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"BSD-2-Clause","githubStars":36652,"starsPerWeek":56,"access":"free","archived":false,"repo":{"createdAt":"2014-04-27","pushedAt":"2026-10-18","license":"BSD-2-Clause","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/restic","html":"/gems/restic","markdown":"/gems/restic.md"}},{"slug":"syft","name":"Syft","tagline":"Apache-2.0 SBOM CLI for images and filesystems (pairs with Grype)","category":"devops","url":"https://github.com/anchore/syft","github":"https://github.com/anchore/syft","pricing":"open-source","hook":"Syft is the SBOM generator when Grype/Trivy need a bill of materials and “what is in this image?” is the question.","whatsGood":"Apache-2.0. anchore/syft. CLI + Go library that builds Software Bills of Materials from container images, filesystems, and archives (SPDX/CycloneDX and friends). Designed to feed scanners like Grype. Active Anchore releases. Source github.com/anchore/syft.","theCatch":"Vs Grype (vuln *scan* from SBOMs/images) and Trivy (broader scanner): Syft is the *SBOM producer*, not the CVE verdict engine. Format choice and package coverage still need CI wiring; it does not replace signed attestations (cosign) or policy gates by itself.","verdict":"Apache-2.0 SBOM CLI. Free forever; generate the bill, then let Grype/Trivy argue about CVEs.","addedAt":"2026-09-12","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Security","tags":["cli","self-host","permissive","security","active"],"capabilities":["cli"],"surfaces":["CLI","Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":9697,"starsPerWeek":29,"access":"free","archived":false,"repo":{"createdAt":"2020-05-07","pushedAt":"2026-10-16","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/syft","html":"/gems/syft","markdown":"/gems/syft.md"}},{"slug":"osv-scanner","name":"OSV-Scanner","tagline":"Apache-2.0 OSV.dev vulnerability scanner for lockfiles and images","category":"devops","url":"https://google.github.io/osv-scanner/","github":"https://github.com/google/osv-scanner","pricing":"open-source","hook":"OSV-Scanner is Google’s CLI onto OSV.dev when you want lockfile/SBOM/image vulns from an open database, not a closed advisory feed.","whatsGood":"Apache-2.0. google/osv-scanner. Official frontend to OSV.dev (+ OSV-Scalibr): scan source, lockfiles, SBOMs, and container images; offline DB mode; license scan path. Docs at google.github.io/osv-scanner; source github.com/google/osv-scanner. Slug is `osv-scanner`.","theCatch":"Vs Trivy/Grype (broader/image-first scanners) and Syft (*SBOM producer*): OSV-Scanner is the OSV.dev-native vuln CLI, not a replacement for every Trivy filesystem/misconfig check and not the SBOM generator. Complements those tools; do not expect identical CVE sets. Networked API unless you go `--offline`.","verdict":"Apache-2.0 OSV.dev scanner. Free forever; pair with Trivy/Grype/Syft, do not clone them.","addedAt":"2026-09-13","featured":false,"domain":"DevOps","subSpecialty":"Security","subcategory":"Security","tags":["cli","self-host","local-first","permissive","security","active"],"capabilities":["vuln","sbom","cli"],"surfaces":["CLI","Self-host"],"ecosystem":["Go","Multi-platform"],"licenseModel":"Apache-2.0","githubStars":11206,"starsPerWeek":55,"access":"free","archived":false,"repo":{"createdAt":"2022-11-14","pushedAt":"2026-10-18","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/osv-scanner","html":"/gems/osv-scanner","markdown":"/gems/osv-scanner.md"}},{"slug":"hadolint","name":"Hadolint","tagline":"GPL-3.0 AST Dockerfile linter + ShellCheck on RUN","category":"devops","url":"https://hadolint.github.io/hadolint/","github":"https://github.com/hadolint/hadolint","pricing":"open-source","hook":"Hadolint is Dockerfile best-practice as an AST when `docker build` green still ships a 1.4 GB image and a broken RUN.","whatsGood":"GPL-3.0. hadolint/hadolint. Parses Dockerfiles into an AST, applies DL#### rules, and runs ShellCheck on `RUN` shell. Online try-out at hadolint.github.io/hadolint; source github.com/hadolint/hadolint.","theCatch":"GPL-3.0 copyleft — same class as ShellCheck; not MIT. Vs Docker (the engine), dive (*layer/size forensics*), and lazydocker (Docker/Compose *TUI*): Hadolint is the *Dockerfile linter*, not a runtime, not layer diffs, not a container dashboard.","verdict":"GPL-3.0 Dockerfile linter. Free forever; lint the recipe, dive the layers, lazydocker the running boxes.","addedAt":"2026-09-14","featured":false,"domain":"DevOps","subSpecialty":"Security","subcategory":"Security","tags":["cli","self-host","copyleft","containers","active"],"capabilities":["lint","docker","cli"],"surfaces":["CLI","Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"GPL-3.0","githubStars":12483,"starsPerWeek":22,"access":"free","archived":false,"repo":{"createdAt":"2015-11-15","pushedAt":"2026-10-14","license":"GPL-3.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/hadolint","html":"/gems/hadolint","markdown":"/gems/hadolint.md"}},{"slug":"destructive-command-guard","name":"Destructive Command Guard","tagline":"MIT-with-rider hook that blocks destructive agent shell and git commands","category":"agents","url":"https://github.com/Dicklesworthstone/destructive_command_guard","github":"https://github.com/Dicklesworthstone/destructive_command_guard","pricing":"open-source","hook":"dcg is a high-performance agent hook that blocks destructive git/shell/cloud commands before coding agents can wipe your tree.","whatsGood":"MIT with an OpenAI/Anthropic rider (Dicklesworthstone/destructive_command_guard). Rust hook with modular security packs (filesystem, git, k8s/helm, CI, cloud CLIs, and more), allowlists, ask-mode where the host supports it, and install paths across Claude Code, Codex CLI, Gemini CLI, Copilot CLI/Chat, Cursor, Hermes, OpenCode, Grok Build CLI, and related hook surfaces. Built for sub-millisecond blocking so agents do not feel a tax on every command.","theCatch":"Vs sandbox products (E2B/Daytona/AgentBox) and Pi containerization docs: dcg is a deny-list hook on the host agent, not a VM/microVM boundary. The license rider voids rights for OpenAI, Anthropic, and their affiliates/agents — fine for most operators, a hard stop if you are those orgs or building their eval pipelines. Packs can be disabled incorrectly; treat \"disabled packs\" behavior as something you verify, and remember a hook is only as strong as the agent actually invoking it.","verdict":"MIT-with-rider destructive-command hook. Strong default safety net for local coding agents; read the OpenAI/Anthropic rider before corporate adoption.","addedAt":"2026-09-22","featured":false,"domain":"AI Agents","subSpecialty":"Agents","subcategory":"Security","tags":["self-host","permissive","license-unclear","coding-agents","git","active"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"OSS/MIT","githubStars":6186,"starsPerWeek":152,"access":"free","archived":false,"repo":{"createdAt":"2026-01-07","pushedAt":"2026-10-19","license":"NOASSERTION","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/destructive-command-guard","html":"/gems/destructive-command-guard","markdown":"/gems/destructive-command-guard.md"}},{"slug":"ai-infra-guard","name":"AI-Infra-Guard","tagline":"Red-team platform for agent, MCP, and skill infrastructure","category":"agents","url":"https://github.com/Tencent/AI-Infra-Guard","github":"https://github.com/Tencent/AI-Infra-Guard","pricing":"open-source","hook":"AI-Infra-Guard turns agent, MCP, and skill infrastructure into a red-team surface that can be exercised from a self-hosted Docker or CLI workflow.","whatsGood":"Apache-2.0. The Tencent Zhuque Lab project bundles a self-hostable platform and CLI for probing AI infrastructure rather than treating prompts, MCP servers, and skills as trusted black boxes. Docker deployment keeps the test environment reproducible, while the breadth is useful for finding control-plane and tool-boundary failures before they reach an agent fleet.","theCatch":"Vs Promptfoo and DeepEval: AI-Infra-Guard is an AI-infrastructure red-team platform, not only an eval runner; vs generic SAST, it understands agent/MCP/skill attack surfaces. Preserve the mandatory attribution — “Based on Tencent Zhuque Lab AI-Infra-Guard” — with the repository link in your deployment and derivative notices. Some tools also require an LLM_API_KEY, so a self-hosted scanner can still carry provider cost and credential risk.","verdict":"Apache-2.0 red-team platform for agent infrastructure. Worth running in a disposable, keyed environment; ship the attribution and scope every model credential.","addedAt":"2026-09-23","featured":false,"domain":"AI Agents","subSpecialty":"Security","subcategory":"Security","tags":["mcp","cli","self-host","permissive","skills","containers","workflows","active"],"capabilities":["security","mcp","cli"],"surfaces":["MCP","CLI","Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":6910,"starsPerWeek":73,"access":"free","archived":false,"repo":{"createdAt":"2024-12-25","pushedAt":"2026-10-19","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/ai-infra-guard","html":"/gems/ai-infra-guard","markdown":"/gems/ai-infra-guard.md"}},{"slug":"litterbox","name":"LitterBox","tagline":"Malware and payload detection sandbox with LitterBoxMCP","category":"agents","url":"https://github.com/BlackSnufkin/LitterBox","github":"https://github.com/BlackSnufkin/LitterBox","pricing":"open-source","hook":"LitterBox gives agents a malware and payload analysis surface, including LitterBoxMCP, before suspicious files become somebody’s execution problem.","whatsGood":"GPL-3.0. Self-hosted Windows and Docker paths make the sandbox inspectable, and LitterBoxMCP gives an agent a structured way to submit or examine payloads instead of pasting malware analysis into a chat. The project is aimed at defensive testing and makes the boundary between an agent and an untrusted sample explicit.","theCatch":"Vs Agent Substrate and coding sandboxes: LitterBox is a malware/payload detection sandbox with an MCP surface, not a general coding workspace or agent runtime isolation layer. The README says “Development use only”; production isolation is an unsolved risk. Windows administration and Linux KVM/Windows-container requirements can be substantial, and GPL-3.0 copyleft still applies to distributed modifications.","verdict":"GPL-3 defensive payload sandbox with LitterBoxMCP. Keep for development analysis in a disposable lab; do not present it as production-grade isolation.","addedAt":"2026-09-23","featured":false,"domain":"AI Agents","subSpecialty":"Security","subcategory":"Security","tags":["mcp","self-host","copyleft","sandbox"],"capabilities":["security","mcp","sandbox"],"surfaces":["MCP","Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"GPL-3.0","githubStars":1551,"starsPerWeek":16,"access":"free","archived":false,"repo":{"createdAt":"2024-12-25","pushedAt":"2026-05-05","license":"GPL-3.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/litterbox","html":"/gems/litterbox","markdown":"/gems/litterbox.md"}},{"slug":"agentao","name":"Agentao","tagline":"MIT governed Python agent runtime — permissions, MCP, memory, replay","category":"agents","url":"https://agentao.cn","github":"https://github.com/jin-bo/agentao","pricing":"open-source","hook":"Agentao is a local-first governed agent runtime you embed in Python or run as CLI/ACP — permissions, protocols, memory, plugins, and audit replay are first-class.","whatsGood":"MIT (jin-bo/agentao; `pip install agentao`). Embeddable harness for hosts that need permissioned tools and MCP, not a free-for-all REPL. Developer guide at agentao.cn (EN/ZH); explicit embed-for-agents playbooks for Claude Code/Codex. Beta on PyPI.","theCatch":"Vs Pi, Unreal Agent, and LangGraph: Agentao is a governed Python embed/CLI runtime, not a TS coding harness, durable-ops library, or graph orchestration framework. Docs and community skew bilingual/China-first; verify the embed API against your host before betting a production path on beta.","verdict":"MIT governed Python agent runtime when permissions, MCP, and replay matter inside your app — not a drop-in Claude Code clone.","addedAt":"2026-09-23","featured":false,"domain":"AI Agents","subSpecialty":"Agents","subcategory":"Security","tags":["mcp","cli","self-host","local-first","permissive","active"],"capabilities":["mcp","cli"],"surfaces":["MCP","CLI","Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"OSS/MIT","githubStars":309,"starsPerWeek":9,"access":"free","archived":false,"repo":{"createdAt":"2026-02-10","pushedAt":"2026-10-18","license":"MIT","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/agentao","html":"/gems/agentao","markdown":"/gems/agentao.md"}},{"slug":"skillspector","name":"SkillSpector","tagline":"Apache NVIDIA scanner for agent skills before you install them","category":"agents","url":"https://docs.nvidia.com/skills/scanning-agent-skills","github":"https://github.com/NVIDIA/SkillSpector","pricing":"open-source","hook":"SkillSpector is NVIDIA’s security scanner for AI agent skills: check Claude Code / Codex / MCP skills for vulns, prompt injection, exfil, and supply-chain risk before install.","whatsGood":"Apache-2.0 (NVIDIA/SkillSpector). Part of the NVIDIA Verified Skills pipeline; docs at docs.nvidia.com/skills. Research-backed framing (high vuln rates in skill corpora). Gate installs in CI or locally instead of trusting a skill README.","theCatch":"Vs Semgrep/Trivy-class general SAST: this is skill/MCP-skill oriented, not a whole-repo AppSec suite. Scanner signal ≠ proof a skill is safe forever — still review permissions and network egress; NVIDIA catalog signing is a separate trust path from running the OSS scanner alone.","verdict":"Apache skill security gate when your agents install third-party skills — run it before the skill runs you.","addedAt":"2026-09-25","featured":false,"domain":"AI Agents","subSpecialty":"Agents","subcategory":"Security","tags":["mcp","self-host","permissive","coding-agents","skills","security","active","fast-stars"],"capabilities":["mcp"],"surfaces":["MCP","Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":20509,"starsPerWeek":675,"access":"free","archived":false,"repo":{"createdAt":"2026-03-21","pushedAt":"2026-10-19","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/skillspector","html":"/gems/skillspector","markdown":"/gems/skillspector.md"}},{"slug":"mcp-scanner","name":"MCP Scanner (Cisco)","tagline":"Apache MCP security scanner — YARA, LLM, Cisco AI Defense","category":"agents","url":"https://github.com/cisco-ai-defense/mcp-scanner","github":"https://github.com/cisco-ai-defense/mcp-scanner","pricing":"open-source","hook":"Cisco’s MCP Scanner is an Apache tool that scans MCP servers and tools for threats — YARA, LLM analysis, and optional Cisco AI Defense — so you gate servers before agents trust them.","whatsGood":"Apache-2.0 (cisco-ai-defense/mcp-scanner). PyPI `cisco-ai-mcp-scanner` (HTTP 200). CLI and REST modes; multi-engine scans (YARA / LLM / Cisco AI Defense), dependency/CVE checks, readiness static analysis, offline JSON scan for CI, OAuth for live MCP connections. Aimed at MCP supply-chain review, not a generic AppSec suite.","theCatch":"Vs SkillSpector / AI-Infra-Guard / destructive-command-guard: SkillSpector gates agent skills; AI-Infra-Guard is a broader red-team platform; dcg blocks destructive host commands — MCP Scanner’s catch is scanning MCP servers/tools/prompts/resources. Full Cisco AI Defense / VirusTotal paths need keys and network; treat OSS engines as the free bar and cloud engines as optional cost/trust.","verdict":"Apache MCP server/tool scanner when you must gate MCP supply chain — not SkillSpector skills-only, not AI-Infra-Guard red-team platform, not dcg host hooks.","addedAt":"2026-10-02","featured":false,"domain":"AI Agents","subSpecialty":"Security","subcategory":"Security","tags":["mcp","self-host","local-first","permissive","security","active"],"capabilities":["mcp","security","scanning"],"surfaces":["MCP","Self-host"],"ecosystem":["Python","Multi-platform"],"licenseModel":"Apache-2.0","githubStars":1094,"starsPerWeek":20,"access":"free","archived":false,"repo":{"createdAt":"2025-09-24","pushedAt":"2026-10-16","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/mcp-scanner","html":"/gems/mcp-scanner","markdown":"/gems/mcp-scanner.md"}},{"slug":"hol-guard","name":"HOL Guard","tagline":"Apache local antivirus for agents — MCP, skills, shell, packages","category":"agents","url":"https://hol.org/guard","github":"https://github.com/hashgraph-online/hol-guard","pricing":"open-source","hook":"HOL Guard is an Apache local-first security layer for AI agents — review shell, files, package installs, and MCP tool calls before they run, with allow/block/approve policy.","whatsGood":"Apache-2.0 (hashgraph-online/hol-guard). PyPI `hol-guard` and `plugin-scanner` (HTTP 200). `pipx install hol-guard` then `hol-guard init` — no account required for local mode. Covers secret exposure, destructive ops, prompt injection, and supply-chain risks across agents/plugins/skills/MCP. Optional Guard Cloud for team policy is separate from the OSS bar.","theCatch":"Vs SkillSpector / mcp-scanner / destructive-command-guard / AI-Infra-Guard: SkillSpector scans skills pre-install; MCP Scanner audits MCP servers; dcg is a host deny-hook; AI-Infra-Guard is red-team platform — HOL Guard’s catch is runtime local policy/antivirus across agent actions including MCP calls. Policy false positives can stall agents; optional cloud is not required — keep local-first if that is the point.","verdict":"Apache local agent antivirus when you need runtime allow/block on tools and MCP — not skills-only scanners and not MCP-server audit alone.","addedAt":"2026-10-02","featured":false,"domain":"AI Agents","subSpecialty":"Security","subcategory":"Security","tags":["mcp","self-host","local-first","permissive","skills","security","active"],"capabilities":["security","mcp","policy"],"surfaces":["MCP","Self-host"],"ecosystem":["Python","Multi-platform"],"licenseModel":"Apache-2.0","githubStars":933,"starsPerWeek":32,"access":"free","archived":false,"repo":{"createdAt":"2026-03-28","pushedAt":"2026-10-19","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/hol-guard","html":"/gems/hol-guard","markdown":"/gems/hol-guard.md"}},{"slug":"mcp-audit-tool","name":"mcp-audit-tool","tagline":"MIT static audit of MCP client configs — poisoning, rugs, secrets","category":"agents","url":"https://github.com/graygnatconsole/mcp-audit-tool","github":"https://github.com/graygnatconsole/mcp-audit-tool","pricing":"open-source","hook":"mcp-audit-tool is a MIT pure-Python CLI that statically audits Claude/Cursor/VS Code MCP client configs for tool poisoning, rug-pull installs, hardcoded secrets, and supply-chain smells — before the model runs them.","whatsGood":"MIT (graygnatconsole/mcp-audit-tool). `pipx install git+https://github.com/graygnatconsole/mcp-audit-tool.git` then `mcp-audit scan` (auto-discovers client configs). 12 rules aimed at OWASP MCP Top 10-class issues; SARIF/JSON for CI; no LLM key required. Distinct from live MCP server probing — this is config static analysis. ★~79.","theCatch":"Package: README PyPI badge may lag — install from the MIT git repo / pipx, not the unrelated PyPI name `mcpaudit` (different project). Vs mcp-scanner / hol-guard / skillspector: MCP Scanner audits MCP servers/tools; HOL Guard is runtime local allow/block; SkillSpector gates skills — mcp-audit-tool’s catch is client-config static audit. ★ still small; pin a commit; findings are leads, not proof.","verdict":"MIT MCP client-config auditor when you gate `.cursor/mcp.json` before connect — not Cisco MCP Scanner servers and not HOL Guard runtime policy.","addedAt":"2026-10-04","featured":false,"domain":"AI Agents","subSpecialty":"Agents","subcategory":"Security","tags":["mcp","cli","editor-plugin","self-host","permissive","security","active","young-repo"],"capabilities":["mcp","cli"],"surfaces":["MCP","CLI","Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"OSS/MIT","githubStars":431,"starsPerWeek":128,"access":"free","archived":false,"repo":{"createdAt":"2026-09-26","pushedAt":"2026-09-26","license":"MIT","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/mcp-audit-tool","html":"/gems/mcp-audit-tool","markdown":"/gems/mcp-audit-tool.md"}},{"slug":"gstack","name":"gstack","tagline":"MIT Garry Tan’s Claude Code role stack — plan, review, QA, ship","category":"agents","url":"https://github.com/garrytan/gstack","github":"https://github.com/garrytan/gstack","pricing":"open-source","hook":"gstack is Garry Tan’s own Claude Code setup as an MIT repo: slash-command roles (CEO plan review, eng review, design review, `/review`, `/qa` in a real browser, `/cso` security audit, `/ship`) so a solo builder runs a structured software factory instead of a blank prompt.","whatsGood":"MIT (garrytan/gstack, VERSION 1.91.25.0). All Markdown skills plus power tools — README counts 23 specialists and eight power tools. Install: `git clone … ~/.claude/skills/gstack && ./setup` (needs Claude Code, Git, Bun); `./setup --host codex|opencode|cursor|factory|kiro|copilot` for other harnesses (experimental tier). Team mode bootstraps a repo so teammates get it. Telemetry is opt-in and every off-machine send writes a local receipt (`gstack-egress list`). ★~135k.","theCatch":"Blast radius: browser skills drive your real logged-in sessions (Aside on macOS) or import cookies from Chrome/Brave/Arc into its bundled browser — treat `/setup-browser-cookies` and the sidebar agent like handing over your accounts. 135k stars in ~7 months — rank on the workflows, not the counter. Claude Code is the only “full” tier; other hosts are advisory, and outside reviews expect Codex/Claude CLIs signed in. Team mode auto-updates every session (throttled hourly) — pin if you need reproducible agents. Vs mattpocock-skills / agent-skills / superpowers: those are smaller composable packs; gstack is a whole opinionated org chart with a browser runtime.","verdict":"MIT opinionated Claude Code software factory when a solo founder wants plan→review→QA→ship roles out of the box — heavy setup and real-session browser power; pin it and audit what it can log into.","addedAt":"2026-10-05","featured":false,"domain":"AI Agents","subSpecialty":"Agents","subcategory":"Security","tags":["self-host","permissive","coding-agents","security","active","fast-stars"],"capabilities":["browser"],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"OSS/MIT","githubStars":136877,"starsPerWeek":4305,"access":"free","archived":false,"repo":{"createdAt":"2026-03-11","pushedAt":"2026-10-19","license":"MIT","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/gstack","html":"/gems/gstack","markdown":"/gems/gstack.md"}},{"slug":"gvisor","name":"gVisor","tagline":"Apache-2.0 userspace container sandbox — OCI runtime runsc for agent isolation","category":"devops","url":"https://gvisor.dev","github":"https://github.com/google/gvisor","pricing":"open-source","hook":"gVisor is Google’s userspace application kernel for containers: the runsc OCI runtime sits between your workload and the host kernel so an agent sandbox (or any untrusted container) cannot treat “container escape” as a single kernel bug away.","whatsGood":"Apache-2.0 (google/gvisor). Free path: install runsc and point Docker/Kubernetes/containerd at it — no account, no SaaS. Implements a Linux-like syscall surface in Go, integrates as a drop-in OCI runtime, and is the isolation layer many agent/sandbox products already sit on. Useful when you need stronger isolation than namespaces+seccomp without standing up a full VM per task. ★~19.6k.","theCatch":"Linux only (kernel 5.6+ recommended). Not every syscall is implemented — exotic workloads fail or fall back. Heavy file and network I/O pay a measurable overhead versus runc. This is a runtime, not an SDK or an orchestration product: you still wire Docker/K8s/agent harnesses yourself. Vs Firecracker/Cloud Hypervisor (microVMs) and plain seccomp: gVisor is the userspace kernel middle path.","verdict":"Apache-2.0 OCI sandbox runtime when agent or untrusted containers need more than runc — Linux-only, syscall gaps, and you bring the orchestrator.","addedAt":"2026-10-06","featured":false,"domain":"DevOps","subSpecialty":"Security","subcategory":"Security","tags":["self-host","permissive","sandbox","containers","active"],"capabilities":["sandbox","containers","runtime"],"surfaces":["Self-host","Hosted"],"ecosystem":["Go","Multi-platform"],"licenseModel":"Apache-2.0","githubStars":19708,"starsPerWeek":45,"access":"free","archived":false,"repo":{"createdAt":"2018-04-26","pushedAt":"2026-10-18","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/gvisor","html":"/gems/gvisor","markdown":"/gems/gvisor.md"}},{"slug":"kyverno","name":"Kyverno","tagline":"Apache-2.0 CNCF Kubernetes policy engine — policies as YAML, not Rego","category":"devops","url":"https://kyverno.io","github":"https://github.com/kyverno/kyverno","pricing":"open-source","hook":"Kyverno is a Kubernetes-native policy engine: validate, mutate, generate, and clean up resources, and verify image signatures, with policies written as Kubernetes YAML instead of a separate policy language.","whatsGood":"Apache-2.0, CNCF project (kyverno/kyverno), v1.19.1. Runs as an admission controller plus background scans and policy reports; CLI for testing policies in CI; large community policy library. Image verification pairs with Sigstore signing — the cosign gem already names Kyverno as its admission-control partner. ★~8.2k.","theCatch":"Enforces at admission time, so a bad policy (or an unavailable webhook with fail-closed settings) can block deploys cluster-wide — roll out in audit mode first. YAML policies get awkward for complex logic; Rego-based engines express that more cleanly. Vs kubescape (posture and compliance scanning) and topaz (application authorization): Kyverno is the in-cluster admission policy lane.","verdict":"Apache-2.0 Kubernetes admission policy engine when policies should be plain YAML — start in audit mode; reach for Rego when logic gets complex.","addedAt":"2026-10-09","featured":false,"domain":"DevOps","subSpecialty":"Security","subcategory":"Security","tags":["self-host","permissive","kubernetes","active"],"capabilities":["kubernetes","policy","admission"],"surfaces":["Self-host"],"ecosystem":["Go","Multi-platform"],"licenseModel":"Apache-2.0","githubStars":8262,"starsPerWeek":21,"access":"free","archived":false,"repo":{"createdAt":"2019-02-04","pushedAt":"2026-10-19","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/kyverno","html":"/gems/kyverno","markdown":"/gems/kyverno.md"}},{"slug":"codex-security","name":"Codex Security","tagline":"OpenAI vulnerability finder and patcher","category":"agents","url":"https://developers.openai.com/codex/security","github":"https://github.com/openai/codex-security","pricing":"open-source","hook":"Codex Security is OpenAI’s scanner-as-an-agent: point `cs scan .` at a repo, it hunts for vulnerabilities, validates the candidates, and can draft patches — instead of handing you a wall of pattern matches.","whatsGood":"Apache-2.0 (openai/codex-security), npm `@openai/codex-security` with `cs` / `codex-security` commands. Scans whole repos, selected paths, or Git changes; deep scans run parallel discovery workers. Validates findings, generates patches, verifies existing fixes, drafts SECURITY.md policies and threat models. Imports GitHub code-scanning alerts, exports SARIF/JSON/CSV, publishes to Linear, and runs in CI or containers. ★~11k.","theCatch":"The CLI is open source but the scanning is model calls: you sign in (`cs login`) or use an OpenAI API key in CI, so real scans cost usage — set the cost limits it documents. Needs Node 22.13+/24/26 plus Python 3.10+. Some scan tiers require separate Trusted Access for Cyber approval. Vs semgrep and trivy (deterministic rule/CVE scanners, free and fast): Codex Security is the slower LLM lane that reasons about and fixes findings — run it beside them, not instead.","verdict":"Apache-2.0 agentic vuln scanner from OpenAI. Use when you want validated findings plus patches and accept paying for the model calls.","addedAt":"2026-10-09","featured":false,"domain":"AI Agents","subSpecialty":"Agents","subcategory":"Security","tags":["self-host","permissive","coding-agents","security","active","young-repo","fast-stars"],"capabilities":[],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":11133,"starsPerWeek":791,"access":"free","archived":false,"repo":{"createdAt":"2026-07-13","pushedAt":"2026-10-19","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/codex-security","html":"/gems/codex-security","markdown":"/gems/codex-security.md"}},{"slug":"ghidra","name":"Ghidra","tagline":"Apache-2.0 NSA reverse-engineering suite with decompiler","category":"devops","url":"https://ghidra-sre.org","github":"https://github.com/NationalSecurityAgency/ghidra","pricing":"open-source","hook":"Ghidra is the NSA’s software reverse-engineering framework: load a compiled binary and get disassembly, a decompiler that turns machine code back into C-like source, graphs and cross-references.","whatsGood":"Apache-2.0 (NationalSecurityAgency/ghidra), release 12.1.4. Free alternative to commercial disassemblers, with a decompiler for many processor families, a debugger, collaborative project servers and a headless mode for batch analysis. Scriptable in Java or Python (PyGhidra), so it is the engine agents can drive — REA on Stack Gems uses it for native binaries. Runs on Windows, macOS and Linux. ★~88k.","theCatch":"A heavy Java desktop app — the 12.1 release needs a 64-bit JDK 21, and Python 3 for the debugger and PyGhidra. The UI is dense and the learning curve is steep. Check that you are allowed to reverse-engineer the target before you start.","verdict":"The free standard for looking inside binaries — expect a learning curve, and pair it with an MCP bridge if your agent should help.","addedAt":"2026-10-15","featured":false,"domain":"DevOps","subSpecialty":"Security","subcategory":"Security","tags":["self-host","permissive","active"],"capabilities":["reverse-engineering","decompiler","desktop"],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"Apache-2.0","githubStars":91064,"starsPerWeek":229,"access":"free","archived":false,"repo":{"createdAt":"2019-03-01","pushedAt":"2026-10-16","license":"Apache-2.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/ghidra","html":"/gems/ghidra","markdown":"/gems/ghidra.md"}},{"slug":"technitium-dns","name":"Technitium DNS Server","tagline":"GPL-3.0 self-hosted recursive DNS server","category":"devops","url":"https://technitium.com/dns/","github":"https://github.com/TechnitiumSoftware/DnsServer","pricing":"open-source","hook":"Technitium DNS Server is a self-hosted DNS server that is both authoritative and recursive, with a web console, network-wide ad and malware blocking, and encrypted upstream forwarding.","whatsGood":"GPL-3.0 (TechnitiumSoftware/DnsServer), release v15.6.2 (2026-10-17), developed since 2017. Works out of the box with minimal config. It can forward over DNS-over-TLS, DNS-over-HTTPS or DNS-over-QUIC, keeps DNS logs and stats, caches queries and hosts your own zones. Built on .NET, so it runs on Linux, Windows, macOS and Raspberry Pi. ★~10.1k.","theCatch":"Running your own resolver makes it a single point of failure for your whole network, so run two. It is a .NET app, heavier than a minimal resolver like Unbound. Mostly built by one company and core developer.","verdict":"A Pi-hole plus real DNS server in one — great for homelabs and small offices.","addedAt":"2026-10-18","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Security","tags":["self-host","copyleft","security","active"],"capabilities":["auth"],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"GPL-3.0","githubStars":10158,"starsPerWeek":22,"access":"free","archived":false,"repo":{"createdAt":"2017-10-29","pushedAt":"2026-10-17","license":"GPL-3.0","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/technitium-dns","html":"/gems/technitium-dns","markdown":"/gems/technitium-dns.md"}},{"slug":"privatebin","name":"PrivateBin","tagline":"Zlib zero-knowledge encrypted pastebin you self-host","category":"devops","url":"https://privatebin.info","github":"https://github.com/PrivateBin/PrivateBin","pricing":"open-source","hook":"PrivateBin is a minimalist pastebin where the server never sees the content: pastes are encrypted and decrypted in the browser with 256-bit AES-GCM, and the key lives in the URL fragment.","whatsGood":"Zlib/libpng license for the core (bundled libraries under their own MIT, BSD, GPLv2 and Apache terms), release 2.0.6 (2026-08-08). A fork of ZeroBin, maintained since 2016. Optional passwords, burn-after-reading, expiry, discussions and file attachments. A small PHP app that runs on cheap hosting or Docker. ★~8.7k.","theCatch":"Users still have to trust the server not to serve malicious JavaScript, so it must run over HTTPS with HSTS. Anyone with the full link can read a paste without a password. PHP is a deliberate choice; it is not a Go single binary.","verdict":"The simplest way to share secrets and logs without trusting the host with the plaintext.","addedAt":"2026-10-18","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Security","tags":["self-host","permissive","license-unclear","security","active"],"capabilities":["browser"],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"OSS/MIT","githubStars":8683,"starsPerWeek":16,"access":"free","archived":false,"repo":{"createdAt":"2016-07-09","pushedAt":"2026-10-18","license":"NOASSERTION","archived":false,"checkedAt":"2026-10-19"},"links":{"self":"/api/gems/privatebin","html":"/gems/privatebin","markdown":"/gems/privatebin.md"}}],"meta":{"total":29,"count":29,"offset":0,"limit":null,"sort":"curated","sorts":["curated","catalog","new","stars","trending","name"],"filters":{"subcategory":"security"},"next":null,"categories":["agents","nextjs","python","shopify","databases","devops","design","observability","rust","payments","comms","notifications","libraries"],"tags":["mcp","cli","tui","api","sdk","desktop-app","web-ui","editor-plugin","self-host","local-first","free-tier","paid-only","paid-led","permissive","copyleft","source-available","license-unclear","coding-agents","local-llm","rag","memory","evals","browser-automation","scraping","sandbox","skills","voice","security","auth","payments","realtime","postgres","vector","kubernetes","containers","observability","testing","workflows","graphics-3d","git","active","stale","archived","young-repo","fast-stars"]}}