security-audits

A collection of public security audits.

A curated list of awesome Solana security resources

Certora's Formal Verification and Audit Portfolio – a comprehensive collection of smart contract security verification reports and audits for leading Web3 protocols on EVM-based chains, Solana, and Stellar.

Command Center Scanner is the client application for Command Center, it's used to perform tasks using containers.

Production-ready AI AppSec skills for SAST, threat modeling, remediation, PR security review, and serialization abuse analysis.

Security-C4PO is an open-source web-application for managing and documenting penetration tests. This tool allows a security tester to keep track of the testing progress according to the OWASP Testing Guide. This application aims to make the offical Testing Guide more actionable to work with.

Use 'Makefile.sec + Docker' to run security tests in CI/CD pipelines.

ansibleAudit is an open source tool designed to perform automated audits of system configurations using Ansible. This tool uses playbooks to verify configurations according to security best practices. If vulnerabilities or misconfigurations are identified, ansibleAudit provides detailed recommendations and procedures to effectively remediate them.

📑 Public Reports of audits done by Neplox

A GRC assessment for a fictional company from the Google Cybersecurity Certification course. This has both my original document and an AI revised version using Claude AI.

DevSecOps portfolio — automated vulnerability scanner pipeline (Trivy + Snyk), AWS cloud security audit (CIS Benchmark), and hardened Linux web server (Nginx + UFW + fail2ban)

Scan codebases for security flaws with LLM agent skills that turn Claude Code, Cursor, and other assistants into SAST scanners

✨ Official GitHub Profile & Web3 Portfolio of Mark Orning

EVM smart contract security reviews, vulnerability assessments, and deterministic PoC exploit suites in Foundry.

Security audit portfolio by No Witness Labs

Agent Zero (On-Chain Agent Intel, onchainagentintel.io) is an agent-native intelligence service for the ERC-8004 agent economy: it continuously indexes the ERC-8004 agents registered on Base and Ethereum, probes their advertised MCP, OpenAPI and .well-known endpoints for liveness, joins on-chain payment activity and ReputationRegistry rows, and…

This project automates system resource monitoring, security audits, and server hardening using Bash scripts, enhancing security and performance.

Welcome to my portfolio, where I showcase my expertise as a security researcher.