security-testing-validation

Sentriq AI — A local-first web security assessment toolkit for authorized SQL injection testing, authentication and access-control checks, Supabase/PostgreSQL auditing, and evidence-based security reports.

A tool to help detection engineers generate Wazuh rule tests either derived from INI test files from Wazuh repository, Windows Event Log (EVTX) files, or Wazuh rule files. The test format uses Python's unittest. It is designed to accompany wazuh-devenv project.

Your detective controls are probably broken. Validate them end-to-end - from pipeline to alert.

Open-source framework for evaluating the security of tool-using AI agents.

Web authorization security lab documenting broken access control, threat modeling, mitigation design, and security test evidence. Project 1

Basically about building custom deliberately vulnerable, multi-tenant applications for practicing one skill: spotting the missing authorization decision.