secure-by-design

Learn Domain-Driven Design, software architecture, design patterns, best practices. Code examples included

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Software & Systems Architecture in Cybersecurity

Source code samples for "Defence in Depth" articles and presentations.

QM is a containerized environment for running Functional Safety qm (Quality Management) software

An opinionated Python package/application template repository, with SLSA and SBOM support built in, enabled for security scanners, code linters, typing, testing and code coverage monitoring, and release automation for reproducible builds.

PHP library for simply secure HTML forms (generation and processing). Secure-by-default.

PeerTree.js An Organic Inspired Network Architecture. Build Apps that scale just by cloning existing nodes for more power..

A clean, minimal template for building games with React, TypeScript, Three.js, and Vite - built with security-first principles.

The divine secure, lightweight PHP 8.3+ framework for building Web Apps, APIs, Microservices, SaaS...

Maturana: secure, open-source personal agent platform built on Codex

An experiment, not a tool: an autonomous agent on a local LLM that proposes changes to its own constitution and values; a human approves every one. Value layer (constitution, identity, skills, rules) sits behind a human approval gate, every change replayable. Runs on Ollama, holds up on a 16 GB Mac, no cloud LLM. Security by absence.

Java DDD project example with hexagonal architechture using spring boot.

The best way to write secure computing. Write nothing.

A secure, production-level command-line password manager with encryption, validation, and enhanced user experience.

AIDR platform team core infrastructure

Production-grade Terraform Stack for Apigee X on GCP (Enterprise-ready, opinionated, secure-by-default)

A frictionless, secure, and purely native LAN file-sharing architecture.

Secure banking auth gateway with shadow locking and timing attack defenses.

Review tools for the disconnected web

An ongoing & curated catalog of SaaS APIs and their security levels, compliance, and regulation like GDPR, ISO27001, PCI and others.