A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.
An enhanced fork of Shizuku — adds Root/ADB/Dhizuku unification, a Plus API suite, and OneUI/Android 16+ compatibility fixes, while staying fully compatible with existing Shizuku apps.
Lightweight, self-hosted Entra ID governance portal: track app/identity ownership, surface credential and access risk, and score tenant health — running in your own Azure subscription.
Omni-SAG — auditable Linux privileged-access gateway (SSH + SFTP): AD+MFA, single-dialer authz, tamper-evident evidence chain, recording, ICAP inspection, CyberArk injection, four-eyes approvals, control-plane API/TUI. Go modular monolith.
Sunucularda kimin yönetici olduğunu gösteren envanter aracı: Active Directory, Windows ve Linux için tek HTML rapor (salt okunur).
Deploy, audit and maintain an Active Directory tier model from a single PowerShell script and one JSON file. Idempotent, plans before it writes.
Transforms IAM exports into a human-readable identity risk narrative with executive summaries and engineer-focused findings.
Enterprise banking IAM architecture implementing tiered Active Directory administration, RBAC, PowerShell provisioning, Group Policy security controls, and independent security assurance.
Self-hosted open-source credential manager for teams. Share company accounts without exposing passwords. Chrome extension auto-login. One-click offboarding.
Pre-execution security for human and AI-generated commands. Correlates intent, privilege, behavior, blast radius, project state, and AV/EDR/SIEM signals to ALLOW, REVIEW, or BLOCK.
Detects changes to identity and access posture. Diffs your directory against a baseline, so it reports what moved rather than everything that is imperfect.
PowerShell-first Active Directory security posture auditor for privileged access, Kerberos, Windows LAPS, Group Policy, ACLs, and offline drift analysis.
Saviynt connector starter for importing Okta users, admin roles, permissions, and privileged access relationships into an identity governance workflow.
Finds privileged Azure RBAC and Entra role assignments that posture tools miss
Synthetic database activity monitoring and SQL threat detection portfolio covering privileged DBA activity, sensitive table access, suspicious query patterns, alert triage, dashboards, and control mapping.
local proof-of-concept implementing the Sovereign Intent Framework - a runtime governance architecture for agentic AI. Tests deterministic policy enforcement, intent manifest hashing, and audit trail generation against seeded adversarial scenarios.
CyberArk session-risk console for privilege drift, checkout posture, high-risk access paths, and evidence-ready remediation routing.
Hands-on vulnerable machine assessments, penetration-testing methodology, exploitation, and privilege escalation write-ups.
Azure landing-zone privileged-access guardrails via Azure Policy + Verified Modules
Terraform + PowerShell that continuously audits Entra ID break-glass accounts: CA exclusion, FIDO2 hardening, permanent Global Admin, tenant guardrails
To associate your repository with the privileged-access topic, visit your repo's landing page and select "manage topics."