payment-security

Open-source reference implementations for AI-enabled payment security, blockchain fraud detection, and AML/CFT compliance reasoning.

Complete reverse engineering of Alipay SecurityGuard SDK — 9 CVEs (MITRE #2005801), AVMP VM bypass, 396/408 (97%) unprotected JSBridge APIs

Trace-backed Agent Authorization Reviews for tool-using AI agents. Staging-only evidence for payment, record-change, access, and export actions.

The Unified Payments Interface (UPI) has revolutionized the way people make payments in India. However, with the increasing adoption of UPI, there has been a rise in fraudulent transactions. To combat this, a UPI fraud detection system Project Includes Source Code, PPT, Synopsis, Report, Documents, Base Research Paper & Video tutorials

AI agent skill atlas for safer Arab/MENA payment and BNPL integrations.

Open-source browser toolkit for HSM key management, payment security, PKI, cryptography, and MCP tools.

Policy & authorization layer for AI agent payments: ALLOW / APPROVAL / DENY with budgets, merchant lists, signed one-time grants and tamper-evident audit. Python + MCP.

Open, vendor-neutral EMV® 3-D Secure protocol lab for researchers, payment engineers, and educators to visualize browser and app flows, compare spec versions, and inspect trust boundaries.

Guardrails for Claude Code and OpenAI Codex reviewing payment systems: idempotency, ledgers, webhooks, reconciliation, and state machines.

PayShield is a fraud detection and secure payment monitoring platform built with Cloudflare Workers, D1, KV, TypeScript, and a web-based dashboard.

Evidence firewall for autonomous AI payments, built with Jac and a deterministic Guardian policy engine.

Stop card testing, bot traffic, and fake signups on any site. Device identity that survives cleared cookies and rotating IPs, velocity across device/subnet/ASN/BIN, and a reason code behind every verdict. Drop-in script tag, self-hosted, MIT.

Find payment logic flaws in Razorpay and Stripe checkouts - client-trusted amounts, rupee/paise bugs, unverified webhooks

Deterministic verification gate for agent-initiated payments. No model on the money path.

The Money Path: a practitioner's handbook on designing, securing and auditing a Stripe integration that deserves to run in production. 126 pages, free PDF.

The complete payment cryptography toolkit — 45+ tools for encryption, hashing, key management, PIN operations, and an interactive Thales payShield 10K HSM Simulator.

Enterprise-grade PCI-DSS v4.0 automated testing framework: API, UI & security test coverage with a built-in mock payment server. TypeScript + Jest + Playwright. Plug-and-play template for QA engineers.

🛡️XAIPT™ — Runtime governance and authority-aware execution research ecosystem exploring HOLD-before-finality, bounded execution, runtime visibility, and human authority before irreversible digital actions.

Open-source agent skills for adversarial code review, payment & entitlement security, canonical triage, and evidence-based remediation.

Intelligent payment simulation & risk response platform — features a rule-based explainable transaction risk engine, automated Twilio SMS & Voice alerts, and an interactive 3D incident console.