Open-source tools for OSINT and application security, built and maintained by @NovaCode37.

Self-hosted OSINT platform. Give it a domain, IP address, email, phone number or username and 26 modules run in parallel: WHOIS, DNS, certificate transparency, breach checks, username search across platforms, threat intelligence. The results come together in one dashboard with an exposure score, an entity graph and HTML or PDF reports.

Python and FastAPI, Next.js, Docker. Live at getprism.su.

Eight security skills for Claude Code that also run on their own and in CI: secret scanning, Python SAST, dependency CVEs, and Dockerfile, JWT, CORS and prompt-injection checks. Standard library only. As a GitHub Action, uses: NovaCode37/claude-security-skills@v1 puts findings on the line of the pull request that introduced them.

Both projects take contributions. Issues labelled good first issue say which files to touch and when the work is done, and pull requests usually get a review within a day.