ThreatFlux builds open-source security tooling in Rust: libraries for binary, string and threat analysis, SDKs for AI and security APIs, and the CI/CD templates we use to ship them.
These are the projects we actively maintain and release. Version badges are live.
| Project | What it does | Release | Crate |
|---|---|---|---|
| file-scanner | MCP-enabled file scanner for security analysis |  |
|
| threatflux-binary-analysis | Parsing and analysis primitives for ELF, PE, Mach-O, Java and WebAssembly binaries |  |
 |
| threatflux-string-analysis | Deterministic, configurable string extraction and analysis for security tooling |  |
 |
| threatflux-threat-detection | Threat detection library with YARA integration and malware analysis |  |
 |
| threatflux-hashing | Async file hashing with MD5, SHA-256, SHA-512 and BLAKE3 |  |
 |
| threatflux-package-security | Offline-first metadata and risk signals for npm, Python and Java packages |  |
 |
| yrlint | Linter for YARA and YARA-X rules |  |
| Project | What it does | Release | Crate |
|---|---|---|---|
| openai_rust_sdk | Async, type-safe Rust client for the OpenAI API |  |
 |
| anthropic_rust_sdk | Rust SDK for the Anthropic API |  |
 |
| vertex_rust_sdk | Async Rust client for generative AI on Google Cloud Vertex AI and Gemini |  |
 |
| ollama_rust_sdk | Async Rust client and CLI for the Ollama API |  |
 |
| virustotal-rs | Rust SDK for the VirusTotal API v3, with an MCP server |  |
 |
| threatflux-atlassian | Rust SDK and CLI for Jira automation |  |
 |
| threatflux-unifi-sdk | SDK for UDM Pro and UniFi OS device automation |  |
 |
| FluxPrompt | Local prompt-injection risk signals and mitigation helpers |  |
 |
| gguf | Read and write GGUF model files |  |
 |
| Project | What it does | Release | Crate |
|---|---|---|---|
| FluxEncrypt | Encryption SDK for Rust applications |  |
 |
| threatflux-cache | Bounded async cache with in-memory and filesystem backends |  |
 |
| Project | What it does | Release |
|---|---|---|
| rust-cicd-template | Rust CI/CD template: GitHub Actions, Makefile, security scanning and release automation |  |
| github_actions | Shared release automation (reusable auto-release workflow and Rust release action) used across ThreatFlux repositories |  |
Every project above uses one release pipeline, built from rust-cicd-template and github_actions. Conventional commits drive versioning, CI and security scans gate every release, crates are published to crates.io, and container images are signed and ship with SBOMs.
Issues and pull requests are welcome. Fork the repository, make your change on a branch, run the project's tests, and open a pull request with a clear description. Check the repository's CONTRIBUTING.md first if it has one, and open an issue before starting large changes.
Please don't report security vulnerabilities in public issues. Email the address below instead.
- Email: wyattroersma@gmail.com
- Website: threatflux.ai
- GitHub: github.com/ThreatFlux