Practical security tooling: auth auditing, API scanning, encryption utilities and pentest checklists.
SecPath is an open-source project by SJA Pathway for the Cybersecurity track. It is built in the open by the community — contribute, learn, and build real, portfolio-worthy work.
- Auth security audit toolkit — session, token and password-policy auditing.
- API security scanner — checks for common OWASP API Top 10 weaknesses.
- Encryption utilities — vetted helpers for encrypting data at rest and in transit.
- Pentest checklist tool — guided, repeatable penetration-testing checklists with reporting.
TypeScript, Node, Python, OWASP tooling.
Open source contribution is free and open to everyone, but this track is aimed at people with 2–3 years of professional experience in Cybersecurity, because the work is real and largely self-directed.
Please note: open-source contribution gives you experience, references from your commit history, and portfolio material — but it does not include a certificate or a reference letter. Those come with the paid internship plans, which include mentorship, structured tasks, and live company projects.
git clone https://github.com/SJA-Pathway/SecPath.git
cd SecPath- Read the open issues and pick one labelled
good first issue. - Comment on the issue so nobody duplicates your work.
- Fork, branch (
feat/your-thing), commit, and open a PR. - Join the Discord and say hello in the SecPath channel.
- One PR per logical change; keep it reviewable.
- Write a clear description of why, not just what.
- Match the existing code style; add tests where they make sense.
- Be kind in reviews. Everyone here is learning.
| Discord | https://discord.gg/qqE5EqXfdy |
| Website | sjapathway.com |
| All repos | github.com/SJA-Pathway |
| Contact | ceo@sjapathway.com |
MIT — see LICENSE.