Learn Domain-Driven Design, software architecture, design patterns, best practices. Code examples included

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Software & Systems Architecture in Cybersecurity

Source code samples for "Defence in Depth" articles and presentations.

An opinionated Python package/application template repository, with SLSA and SBOM support built in, enabled for security scanners, code linters, typing, testing and code coverage monitoring, and release automation for reproducible builds.

QM is a containerized environment for running Functional Safety qm (Quality Management) software

PHP library for simply secure HTML forms (generation and processing). Secure-by-default.

A clean, minimal template for building games with React, TypeScript, Three.js, and Vite - built with security-first principles.

The divine secure, lightweight PHP 8.3+ framework.

Java DDD project example with hexagonal architechture using spring boot.

The best way to write secure computing. Write nothing.

A secure, production-level command-line password manager with encryption, validation, and enhanced user experience.

Production-grade Terraform Stack for Apigee X on GCP (Enterprise-ready, opinionated, secure-by-default)

A frictionless, secure, and purely native LAN file-sharing architecture.

Review tools for the disconnected web

Secure banking auth gateway with shadow locking and timing attack defenses.

An ongoing & curated catalog of SaaS APIs and their security levels, compliance, and regulation like GDPR, ISO27001, PCI and others.

This crate aim to provide a type-safe way to handle and sanitize potentially untrusted values like user input.

Maraikka - Protect What Matters

Production‑ready Node.js microservice providing clean, reliable, and fully tested cryptography endpoints. Implements classic ciphers (ROT13, Caesar, Vigenère, Polybius) with strict validation, modular architecture, and TypeScript for maximum safety and clarity.

# Enterprise-Ready Tauri 2.0 Boilerplate

A secure passwordless system based on a user-defined multi-tap sequence recalled and reproduced during login

Online, browser-based, end-to-end encrypted password manager.

A secure, full-featured password generator built with Laravel & Vue.js. Generate strong passwords, analyze their strength, manage favorites and history, and export them in TXT/JSON formats — all in a responsive, dark-mode UI. 100% local, fast, and privacy-focused.

Arquitetura de execução controlada para consultas NL2SQL com políticas, templates e auditoria.

Design memorandum and specification site for “memorial bots” that operate without improvisation, providing proof-carrying answers, maintaining transparency logs, and adhering to standards-based identity protocols.

Software supply-chain security domain repository delivering modular components for artifact signing, build attestation, provenance tracking, SBOM generation, policy enforcement, and runtime integrity — designed to enable verifiable, tamper-resistant delivery pipelines.

Online, browser-based, end-to-end encrypted password manager.

AppSec engineering portfolio: OWASP Top 10 case studies in PHP & Python (repro → fix → tests) plus Secure SDLC & AWS security notes.

Secure Full-Stack Application for the Enterprise Architecture (AREP) course at Escuela Colombiana de Ingeniería Julio Garavito. Implements a split-server architecture with two isolated AWS EC2 instances, featuring end-to-end HTTPS (Let's Encrypt), secure asynchronous communication between Apache and Spring Boot, and BCrypt-based authentication.

AsterionDB enables data-layer microservices!!! AsterionDB is the first converged platform that merges all data types and business logic in the data layer. With all of our resources in the database, that leaves very little for the middle-tier to do. Therefore, let's run our slimmed down VM's from the DB...!!!