payment-security

Open-source reference implementations for AI-enabled payment security, blockchain fraud detection, and AML/CFT compliance reasoning.

Complete reverse engineering of Alipay SecurityGuard SDK — 9 CVEs (MITRE #2005801), AVMP VM bypass, 396/408 (97%) unprotected JSBridge APIs

Trace-backed Agent Authorization Reviews for tool-using AI agents. Staging-only evidence for payment, record-change, access, and export actions.

The Unified Payments Interface (UPI) has revolutionized the way people make payments in India. However, with the increasing adoption of UPI, there has been a rise in fraudulent transactions. To combat this, a UPI fraud detection system Project Includes Source Code, PPT, Synopsis, Report, Documents, Base Research Paper & Video tutorials

Open-source browser toolkit for HSM key management, payment security, PKI, cryptography, and MCP tools.

AI agent skill atlas for safer Arab/MENA payment and BNPL integrations.

Open, vendor-neutral EMV® 3-D Secure protocol lab for researchers, payment engineers, and educators to visualize browser and app flows, compare spec versions, and inspect trust boundaries.

Policy & authorization layer for AI agent payments: ALLOW / APPROVAL / DENY with budgets, merchant lists, signed one-time grants and tamper-evident audit. Python + MCP.

Guardrails for Claude Code and OpenAI Codex reviewing payment systems: idempotency, ledgers, webhooks, reconciliation, and state machines.

PayShield is a fraud detection and secure payment monitoring platform built with Cloudflare Workers, D1, KV, TypeScript, and a web-based dashboard.

Evidence firewall for autonomous AI payments, built with Jac and a deterministic Guardian policy engine.

The complete payment cryptography toolkit — 45+ tools for encryption, hashing, key management, PIN operations, and an interactive Thales payShield 10K HSM Simulator.

Deterministic verification gate for agent-initiated payments. No model on the money path.

Find payment logic flaws in Razorpay and Stripe checkouts - client-trusted amounts, rupee/paise bugs, unverified webhooks

AI-powered payment fraud risk management system using LightGBM, behavioral transaction analysis, SHAP explainability, and deterministic risk policies.

The Money Path: a practitioner's handbook on designing, securing and auditing a Stripe integration that deserves to run in production. 126 pages, free PDF.

Enterprise-grade PCI-DSS v4.0 automated testing framework: API, UI & security test coverage with a built-in mock payment server. TypeScript + Jest + Playwright. Plug-and-play template for QA engineers.

Stop card testing, bot traffic, and fake signups on any site. Device identity that survives cleared cookies and rotating IPs, velocity across device/subnet/ASN/BIN, and a reason code behind every verdict. Drop-in script tag, self-hosted, MIT.

Open-source agent skills for adversarial code review, payment & entitlement security, canonical triage, and evidence-based remediation.

Merchant-side authorization gateway for AI buyers: signed mandates, deterministic payment limits, evidence-bound intent checks, human step-up, and Razorpay test-mode execution.