OpenSSL

OpenSEO is an open-source SEO tool developed as a self-hostable alternative to Semrush and Ahrefs. It provides workflows for keyword research, rank tracking, competitor insights, backlink analysis, site audits, and AI visibility, using a DataForSEO API key for the underlying SEO data. The project exposes an MCP server and reusable agent skills that let agents such as Claude Code, OpenClaw, and Hermes access SEO data and perform guided SEO tasks. It can be self-hosted with Docker for personal use or Cloudflare for internet-facing use across devices or teams; a hosted version is also available, with pricing described as pay-as-you-go for API usage and a subscription option.

OpenBao is an open-source software solution for managing, storing, and distributing sensitive data such as secrets, certificates, and keys. It encrypts arbitrary key/value secrets before writing them to persistent storage, supports storage on disk and PostgreSQL, and can generate system-specific dynamic credentials such as AWS or SQL database secrets on demand. Generated secrets have leases that clients can renew through built-in APIs and that OpenBao can automatically revoke; revocation can also target individual secrets or groups such as all secrets accessed by a user or of a particular type. OpenBao also provides encryption and decryption without storing the data, along with audit and key-rolling capabilities. The project is community-run under open-governance principles and is implemented in Go, with a command-line server and web UI.

Codex Security is an OpenAI CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in authorized code repositories. It scans directories and codebases, including repository changes, uses AI-assisted analysis to trace attack paths and apply custom threat models, validates findings, and can generate reviewable patches and exports in SARIF, JSON, and CSV formats. The CLI supports CI use with an API key and can stop builds at a selected severity threshold. The package also supports configurable deep scans, worker and subagent counts, time limits, containerized bulk scans, and a preview findings service. The service stores findings and embeddings in SQLite, provides paginated listings and a read-only dashboard, identifies potential duplicates through embedding similarity, and allows completed findings to be published and deduplicated through the CLI or SDK. It requires Node.js 22.13.0 or later and Python 3.10 or later, and can use OpenAI or other documented inference providers.

Let's Seal is an open standard, reference implementation, and free service for proving that a file is unaltered, existed by a certain date, and was sealed by a specific certificate. It preserves native signature formats such as PAdES/X.509 signatures for PDFs and uses OpenTimestamps to anchor time to Bitcoin. Each seal is also recorded in an append-only transparency log with a Bitcoin-anchored root, allowing independent auditing. The project provides a hosted web app, the `sealbot` command-line tool, a REST API and SDKs, and a self-hosted engine with its own certificate authority; verification is available online or offline without an account. The repository states that the engine, SDKs, and standard are open source under the Apache-2.0 license.

OpenShell is an open-source runtime from NVIDIA and a structural safety safeguard for running fleets of autonomous AI agents in isolated sandboxes, complementing model-based policy checks. It lets agents read files, install packages, call APIs, and use credentials while enforcing declared filesystem, process, and network policies. Each agent runs in a sandbox where kernel-level controls govern file access, system calls, and network connections. OpenShell also uses formal verification to review policy changes before approval, flagging newly permitted access such as connections to additional hosts with credentials or calls to new API methods. Credentials are withheld from agents and added only to requests bound for approved endpoints. The project provides a CLI, local gateway, sandbox lifecycle management, policy tooling, inference-provider routing, Kubernetes deployment, extensibility APIs, and Python, TypeScript, Go, and Rust SDKs.