Our Ecosystem
Security tools for every stack.
A collection of modular, OWASP-aligned libraries designed to fit seamlessly into your development workflow.
owlauth
@restingowlorg/owlauthv1.0
The complete authentication library for the web, starting with Node.js. Credentials, magic links, and breached-password protection.
owltokenguard
@restingowlorg/owltokenguardv1.0
Token management for Node.js: JWT access and refresh issuance, refresh-token rotation, fail-shut verification and session revocation, with Express and Fastify middleware.
owlsessionguard
@restingowlorg/owlsessionguardv1.0
Session management for Node.js: high-entropy tokens, hash-only storage, rotation with reuse detection, device and IP binding, CSRF protection and revocation, with Express, Fastify and NestJS middleware.
Packages FAQ
Yes. OwlAuth, OwlTokenGuard, and OwlSessionGuard are all at v1.0 and ready for production use. More packages are in active development.
We're starting with Node.js/TypeScript, and actively expanding to more runtimes and frameworks. The community and security knowledge base is open to every developer who cares about building secure software, regardless of stack.