NexaForge OSS is a set of free, open source security and AI tools by Syed Farhan Ahmed (SFA) in Karachi, Pakistan, built for SOC analysts, penetration testers and developers.
Most of these tools started as something I needed at work and could not find. Each one does one job, runs offline or on your own machine where it can, and says plainly what it cannot do yet.
Website · Sponsor · Profile of the maintainer · LinkedIn
| Tool | What it does | Licence |
|---|---|---|
| wazuh-ruleguard | Tests Wazuh 4.x detection rules with JSON scenarios and shows what changed after a rule edit or an upgrade | Apache 2.0 |
| wazuh-noiselens | Shows which Wazuh alerts a proposed suppression would hide, offline, with a guard for protected alerts | Apache 2.0 |
| hexswarm | A scope gated swarm of AI agents for authorized penetration testing, bug bounty and CTF targets | MIT |
| no-api-media-mcp | Generates images and videos in Claude Code, Cursor or Codex using the AI subscriptions you already pay for, no API keys | Apache 2.0 |
| urdu-tts-pronunciation | Helps AI text to speech voices pronounce Urdu correctly, with a word list, a script linter and a checker | MIT |
These repositories are kept in step with the same tools on my personal profile, github.com/farhan6667, where I do the day to day work.
Wazuh and the AI products named above belong to their owners. These are independent projects and are not affiliated with or endorsed by them.
Who is behind this? One person, Syed Farhan Ahmed (SFA), a cyber security professional in Karachi. NexaForge is the name I work under. It is not a registered company.
Are the tools really free? Yes. Every tool listed here is open source, and the licence is shown in the table and in each repository.
How can I help? The most useful help is a real world test report from your own Wazuh manager or setup, a clear bug report, or a fix. Look for the good first issue label in each repository.
How can I sponsor the work? The sponsor page explains the options. GitHub Sponsors is not available in Pakistan, so funding is collected through Open Collective, which accepts a card with any amount.
Do you offer paid work? Yes, security reviews, penetration testing, detection engineering and custom tooling are offered through NexaForge.
