I’ve been working on OpenSec, a security auditing tool specifically designed for OpenBSD. It leverages libkvm to inspect the kernel state of running processes and verify their security mitigations.

Core Features:

    Mitigation Audit: Checks if processes are correctly using pledge(2) and unveil(2).

    Kernel Integration: Direct interaction with system structures via kvm_getprocs.

    BSD Philosophy: Lightweight, no external dependencies, and focused on security transparency.

I developed this to help sysadmins and developers verify if their applications are truly sandboxed as intended by the OpenBSD security model. Feedback from the BSD community is highly appreciated!

Repository: https://github.com/jeffersoncesarantunes/OpenSec

If you are an OpenBSD enthusiast or a security researcher, please consider leaving a ⭐!

Thanks!