mtls

Self-hosted control plane for TLS certificates, ready for 47-day certificates: issue, renew, discover, inventory and deploy them, and serve ACME for internal names and IPv4 addresses

Self-hosted certificate authority with a web UI: ACME, SCEP, EST, OCSP, CRL, TSA, SSH CA, Windows autoenrollment, network discovery, post-quantum ML-DSA and a FIPS build.

Signed MQTT deployments for edge fleets: control plane + agent, mTLS, Ed25519 command verification, Docker/K8s.

Live index of all X.509 Certificates in Step CA queryable via GUI and API, easy human onboarding with in-browser CSR generation.

Microservice using eIDAS certificates for signing Open Banking / PSD2 API requests and accessing banks’ APIs over mTLS

Skill não oficial da API Banco Inter para ChatGPT, Codex e Claude Code — Pix, boleto, Banking, webhooks, OAuth 2.0 + mTLS.

Build an enterprise-level AI agent operating system enabling cross-departmental and cross-system intelligent collaboration.

Cliente Python para a NFS-e Nacional do Brasil (SEFIN) — assinatura, transmissão, consulta, cancelamento, DFe e DANFSe.

⚡ OCPP 1.6 + 2.0.1 Central System with zero trust networking, built-in PKI, and profile-driven charger compatibility

Software Defined Git Operated Infrastructure

RabbitMQ 4.2 mTLS and AMQP 1.0 - Proof of Concept. This project hat demonstrates how to configure a RabbitMQ 4.2 environment to use mutual TLS authentication (mTLS) and the AMQP 1.0 protocol.

Security by Design reference: JWT/mTLS auth, RBAC, DevSecOps pipeline (SAST/DAST/SBOM/Cosign), Kubernetes hardening. Production-grade patterns.

AI-native Zero-Trust behavioral detection & autonomous-response cybersecurity platform. Hybrid engine: behavior baseline + anomaly scoring + LLM reasoning + SHAP-style explainability. On-prem / hybrid / SaaS with mTLS, AES-256-GCM+KMS, tamper-proof hash-chain audit & field-level RBAC/ABAC.

Deterministic MCP Security Architecture. FrozenNamespace as Root of Trust for Model Context Protocol tool verification

OCPP gateway service for the Eveys EV-charging platform. Owns every charger's WebSocket connection; exposes gRPC + Kafka events + a REST API for the rest of the platform.

Fail-closed human and workload authentication for Python and Litestar: opaque sessions, mTLS, DPoP, SPIFFE, webhooks, and HTTP signatures.

A from-scratch Zero Trust Network Access implementation with MFA, ABAC policy enforcement, mTLS-secured gateway, device attestation, continuous verification, risk-based access control, network context analysis, and tamper-evident auditing. Built for Windows (Python 3.10+).

ASGI3 server with built-in HTTP/1.1, HTTP/2, HTTP/3, QUIC, WebSocket, TLS, static delivery, and release validation.

Server-side smart home sensor telemetry platform with dual-broker mTLS (EMQX & Mosquitto), simulated device fleets, ESPHome configs, and Home Assistant control plane.

Stop attackers from going around Cloudflare: an Agent Skill and zero-dependency tools to find, close and prove closed every path to your origin server.