Security

SSL verification library

CA bundle adapted from Mozilla by https://certifi.io

Up-to-date CA certificate store.

CA store + Partial chain handler

Security-focused static analysis for Elixir & the Phoenix framework

MixAudit provides a `mix deps.audit` task to scan a project Mix dependencies for known Elixir security vulnerabilities

Helper library that obfuscates sensitive values in process state

An Elixir Plug that adds Cross-Origin Resource Sharing (CORS) headers to requests and responds to preflight requests (OPTIONS).

A rate-limiter with plugable backends.

HTML sanitizer for Elixir

ExRated, the OTP GenServer with the naughty name that allows you to rate-limit calls to any service that requires it. For example, rate-limit calls to your favorite API which requires no more than `limit` API calls within a `scale` milliseconds time window.

Redis backend for Hammer rate-limiter

The Paraxial.io Agent.

A plug building toolkit for blocking and throttling abusive requests.

Elixir implementation of zxcvbn

Server side implementation of IETF HTTP signature draft as a reusable Plug

A plug to apply rate-limiting, using Hammer.

An Ash extension for rate limiting actions

Detect leaked credentials in project directories

ContentSecurityPolicy makes working with the `"Content-Security-Policy"` response header simple.

Elixir implementation of Cloudfront's url signature algorithm.

An Elixir implementation of the Paseto (Platform Agnostic Security Token) protocol.

This library provides security utilities to validate a GraphQL query before executing it.

A Plug module for inserting a Content Security Policy header into the response. Supports generating nonces as specified in CSP Level 2.

Use Cloudflare Turnstile in Phoenix

Mnesia backend for Hammer rate-limiter

A library for manipulating sensitive/private/confidential data and avoiding data leaks.

A simple lib to define right SSL options

Integrated certification via Let's encrypt for Elixir-powered sites

Rebar3 plugin to generate CycloneDX SBoM

Simple key/secret based authentication for APIs

Cloud Key Management Service (KMS) API client library. Manages keys and performs cryptographic operations in a central cloud service, for direct use by other cloud resources and applications.

Highly configurable library for HashiCorp's Vault - handles authentication for multiple backends, and reading, writing, listing, and deleting secrets for a variety of engines.

ACME client

A module to insert sensible security headers

Hostname verification library for Erlang

A simple reCaptcha package for Elixir applications, provides verification and templates for rendering forms with the reCaptcha widget.

CVSS (Common Vulnerability Scoring System) library for Erlang

SSRF Protection in Elixir 🛡️

Thin, error-friendly and testable wrapper for ClamAV

A lightweight library for creating and verifying ALTCHA challenges.

IAM Service Account Credentials API client library. Creates short-lived credentials for impersonating IAM service accounts. Disabling this API also disables the IAM API (iam.googleapis.com). However, enabling this API doesn't enable the IAM API.

Data anonymization for your Ecto models

A sandbox for Elixir to safely evaluate untrusted code from user input

A package that allows you to store encrypted application secrets in your VCS

High performance application-layer DDoS protection for Elixir Phoenix

Store sensitive data in a secure way, completely for free, on Blockchain. Works with the Stellar network.

Server side implementation of RFC3230 Instance Digests as a Plug

Audit rebar3 dependencies for known vulnerabilities

All-included solution for managing secrets in mix projects

Sensitive Data Protection (DLP) client library. Discover and protect your sensitive data. A fully managed service designed to help you discover, classify, and protect your valuable data assets with ease.

A CORS Builder, performing validation and injection of CORS for misp, wisp and any framework!

Runtime application self protection for Elixir.

Library for manipulating and validating HTTP signatures

A simple, framework-agnostic, in-memory rate limiter for Gleam.