Security

SSL verification library

CA bundle adapted from Mozilla by https://certifi.io

Up-to-date CA certificate store.

Helper library that obfuscates sensitive values in process state

CA store + Partial chain handler

Security-focused static analysis for Elixir & the Phoenix framework

An Elixir Plug that adds Cross-Origin Resource Sharing (CORS) headers to requests and responds to preflight requests (OPTIONS).

MixAudit provides a `mix deps.audit` task to scan a project Mix dependencies for known Elixir security vulnerabilities

A rate-limiter with plugable backends.

ExRated, the OTP GenServer with the naughty name that allows you to rate-limit calls to any service that requires it. For example, rate-limit calls to your favorite API which requires no more than `limit` API calls within a `scale` milliseconds time window.

HTML sanitizer for Elixir

Redis backend for Hammer rate-limiter

The Paraxial.io Agent.

A plug building toolkit for blocking and throttling abusive requests.

Elixir implementation of zxcvbn

A plug to apply rate-limiting, using Hammer.

Server side implementation of IETF HTTP signature draft as a reusable Plug

A package that allows you to store encrypted application secrets in your VCS

A library for manipulating sensitive/private/confidential data and avoiding data leaks.

Simple key/secret based authentication for APIs

ContentSecurityPolicy makes working with the `"Content-Security-Policy"` response header simple.

An Elixir implementation of the Paseto (Platform Agnostic Security Token) protocol.

A simple lib to define right SSL options

Mnesia backend for Hammer rate-limiter

Cloud Key Management Service (KMS) API client library. Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.

A Plug module for inserting a Content Security Policy header into the response. Supports generating nonces as specified in CSP Level 2.

Elixir implementation of Cloudfront's url signature algorithm.

Integrated certification via Let's encrypt for Elixir-powered sites

Highly configurable library for HashiCorp's Vault - handles authentication for multiple backends, and reading, writing, listing, and deleting secrets for a variety of engines.

SSRF Protection in Elixir 🛡️

A simple reCaptcha package for Elixir applications, provides verification and templates for rendering forms with the reCaptcha widget.

Primitive Erlang Security Tool

IAM Service Account Credentials API client library. Creates short-lived credentials for impersonating IAM service accounts. Disabling this API also disables the IAM API (iam.googleapis.com). However, enabling this API doesn't enable the IAM API.

An Elixir library to sign and verify HTTP requests using AWS Signature V4.

This library provides security utilities to validate a GraphQL query before executing it.

ACME client

Thin, error-friendly and testable wrapper for ClamAV

A module to insert sensible security headers

Use Cloudflare Turnstile in Phoenix

A sandbox for Elixir to safely evaluate untrusted code from user input

A CORS Builder, performing validation and injection of CORS for misp, wisp and any framework!

High performance application-layer DDoS protection for Elixir Phoenix

Data anonymization for your Ecto models

A very simple read only client that authenticates and reads secrets from HashiCorp's Vault.

Disable introspection and exfiltration of GraphQL schemas

Server side implementation of RFC3230 Instance Digests as a Plug

Runtime application self protection for Elixir.

Rebar3 plugin to generate CycloneDX SBoM

Library for manipulating and validating HTTP signatures

A lightweight library for creating and verifying ALTCHA challenges.

An Ash extension for rate limiting actions

Middleware-based rate limiting for Absinthe

Clamav wrapper.

Rate limiting Plug module based on Redis Lua scripting

Simple and secure secrets manager in Elixir projects.

Validate if code is safe to load and run

An Elixir library to sign and verify HTTP requests using AWS Signature V4.

Sandbox provides restricted, isolated scripting environments for Elixir through the use of Lua by wrapping Robert Virding's Luerl library.

A high performance rate limiter on top of erlang atomics for Elixir