Security

SSL verification library

CA bundle adapted from Mozilla by https://certifi.io

Up-to-date CA certificate store.

Helper library that obfuscates sensitive values in process state

CA store + Partial chain handler

Security-focused static analysis for Elixir & the Phoenix framework

MixAudit provides a `mix deps.audit` task to scan a project Mix dependencies for known Elixir security vulnerabilities

An Elixir Plug that adds Cross-Origin Resource Sharing (CORS) headers to requests and responds to preflight requests (OPTIONS).

A rate-limiter with plugable backends.

HTML sanitizer for Elixir

ExRated, the OTP GenServer with the naughty name that allows you to rate-limit calls to any service that requires it. For example, rate-limit calls to your favorite API which requires no more than `limit` API calls within a `scale` milliseconds time window.

The Paraxial.io Agent.

Redis backend for Hammer rate-limiter

Acme (Let's Encrypt) Client for Elixir

Alexa Request Verifier is a library that handles all of the certificate and request verification for Alexa Requests for certified skills. (See the Alexa Skills Documentation for more information).

A plug building toolkit for blocking and throttling abusive requests.

A test Acme server for generating SSL Certificates

Acmex is an Elixir Client for the Lets Encrypt ACMEv2 protocol.

A plug to apply rate-limiting, using Hammer.

A lightweight library for creating and verifying ALTCHA challenges.

Elixir plug to protect your APIs from Host header attacks.

Middleware-based rate limiting for Absinthe

A library for manipulating sensitive/private/confidential data and avoiding data leaks.

This library provides security utilities to validate a GraphQL query before executing it.

An Elixir implementation of the Paseto (Platform Agnostic Security Token) protocol.

Elixir implementation of zxcvbn

Server side implementation of IETF HTTP signature draft as a reusable Plug

ContentSecurityPolicy makes working with the `"Content-Security-Policy"` response header simple.

An Ash extension for rate limiting actions

Highly configurable library for HashiCorp's Vault - handles authentication for multiple backends, and reading, writing, listing, and deleting secrets for a variety of engines.

ACME client, supports HTTP-01 and DNS-01 challenges

A Plug to verify signatures for Amazon Alexa requests

Elixir implementation of Cloudfront's url signature algorithm.

A Plug module for inserting a Content Security Policy header into the response. Supports generating nonces as specified in CSP Level 2.

Cloud Key Management Service (KMS) API client library. Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.

A package that allows you to store encrypted application secrets in your VCS

Integrated certification via Let's encrypt for Elixir-powered sites

ACME client

A simple lib to define right SSL options

A simple reCaptcha package for Elixir applications, provides verification and templates for rendering forms with the reCaptcha widget.

A module to insert sensible security headers

Simple key/secret based authentication for APIs

Use Cloudflare Turnstile in Phoenix

SSRF Protection in Elixir 🛡️

A sandbox for Elixir to safely evaluate untrusted code from user input

Rebar3 plugin to generate CycloneDX SBoM

IAM Service Account Credentials API client library. Creates short-lived credentials for impersonating IAM service accounts. Disabling this API also disables the IAM API (iam.googleapis.com). However, enabling this API doesn't enable the IAM API.

Thin, error-friendly and testable wrapper for ClamAV

Data anonymization for your Ecto models

Gleam library for interacting with Automatic Certificate Management Environment (ACME) servers like Let's Encrypt

High performance application-layer DDoS protection for Elixir Phoenix

Clamav wrapper.

Mnesia backend for Hammer rate-limiter

A CORS Builder, performing validation and injection of CORS for misp, wisp and any framework!

An Elixir library to sign and verify HTTP requests using AWS Signature V4.

Primitive Erlang Security Tool

Disable introspection and exfiltration of GraphQL schemas

Hostname verification library for Erlang

Audit rebar3 dependencies for known vulnerabilities

Runtime application self protection for Elixir.

A very simple read only client that authenticates and reads secrets from HashiCorp's Vault.