random_compat
random_compat PHP 5.x polyfill for random_bytes() and random_int() created and maintained by Paragon Initiative Enterprises. Although this library should function in earlier versions of PHP, we will only consider issues relevant to supported PHP versions. If you are using an unsupported version of PHP, please upgrade as soon as possible. Important: Although this library has been examined by some security experts in the PHP community, there will always be a chance that we overlooked something. Please ask your favorite trusted hackers to hammer it for implementation errors and bugs before even thinking about deploying it in production. Do not use the master branch, use a stable release. For the background of this library, please refer to our blog post on Generating Random Integers and Strings in PHP. Usability Notice: If PHP cannot safely generate random data, this library will throw an Exception. It will never fall back to insecure random data. If this keeps happening, upgrade to a newer version of PHP immediately. Installing With Composer: # For libraries and frameworks that support PHP 5 but may be used by # other software that only supports PHP 7: composer require paragonie/random_
FEATURES
ALTERNATIVES
A tool for creating cryptographically strong volumes that destroy themselves upon tampering or via issued command.
Red October is a software-based two-man rule style encryption and decryption server.
SOPS is an editor of encrypted files supporting various formats and encryption methods.
A demonstration of a method to delete a locked executable or currently running file from disk.
Tenzir is a data pipeline solution for optimizing cloud and data costs, running detections and analytics.
Using high-quality entropy sources for CSPRNG seeding is crucial for security.
Steganography brute-force utility with performance issues, deprecated in favor of stegseek.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Check Point CloudGuard WAF
A cloud-native web application and API security solution that uses contextual AI to protect against known and zero-day threats without signature-based detection.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.