Havuz

The vendor-neutral protocol for AI agent safety & security — and the neutral benchmark that ranks the vendors.

🤖 LLM Engineering Roadmap — Complete Developer Guide

Verify which LLM an OpenAI-compatible API really serves — single-token behavioral fingerprinting (Jensen-Shannon) from the paper "One Token

Local security proxy that keeps secrets and sensitive data out of AI requests. Supports Codex, Claude Code and more.

Tactical Identity Operator for Linux & Hybrid Active Directory

Ground truth for enterprise AI: your AI coding tools, your accounts and every session on your own server, from one web console, CLI or API.

Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS,

Benchmarking repository-borne prompt injection attacks and lightweight defenses for local coding agents. DL4C @ ICML 2026.

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

AI agent benchmark hackability scanner — find evaluation vulnerabilities before they undermine your results

Autonomous AI-powered penetration testing platform. LLM-driven recon, vulnerability analysis, and exploit validation for internal & external

Self-hosted LLM security proxy. PII redaction, prompt injection defense, KVKK/GDPR/PCI-DSS compliance. Sub-millisecond latency

reconnaissance for agent attack surfaces

An open library of 206 security skills for AI agents — pentest, bug bounty, CTF, reversing & defense across 23 domains, with CI-verified rou

Open-source AI security tool to scan and fix vulnerabilities in your vibe-coded projects before you ship. AXguard by AwareXone.

Adversarial security testing for AI agents — prompt injection, tool misuse, memory poisoning, and MCP scanning, with CI-ready regression tes

The control layer for agentic AI. A protocol-aware proxy that applies identity, policy, trust and payment controls to A2A, MCP and DIDComm t

Static security scanner for npm/PyPI packages, MCP servers, agent skills and repos. Runs locally, never runs the code, no LLM. CLI, Claude C

Open-source adversary emulation for AI agents and MCP servers.

Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connector

Tamper-evident audit trails for AI agents: hash-chained Runtime Records, dependency-free, verifiable by anyone.

44 plug-and-play skills for OpenClaw — self-modifying AI agent with cron scheduling, security guardrails, persistent memory, knowledge graph

👻 AI-Powered Pentesting Command Center — Autonomous security testing with real-time streaming, self-improving AI, unlimited tool iterations,

Security control plane for AI agents — identity and delegation, capability policy, data-flow taint and a live audit trail, enforced over MCP

Executable security regression testing for agentic applications and MCP-integrated systems.

sofagent is an open-source FDE Harness for AI coding agents — on entry, write your business judgment into files (workflows, ontology, AI nod

Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys

Local-first MCP security scanner for AI-generated apps: four open-source engines plus the Synvoya engine. Scan → fix → rescan from Claude Co

Self-hosted AI security proxy. Redact PII, block prompt injection, route to any LLM provider. OpenAI-compatible.

AI Firewall & LLM security toolkit - protect your AI applications from prompt injection, jailbreaks, PII leakage, and adversarial attacks

Public SDKs and integration contracts for Armorer Guard.

🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 1

Este es mi acordeón para ayudarte a pasar la certificación AB-730 de Microsoft, Profesional en Negocios de IA. A pesar de que este acordeón

A codebase scanner that helps you not run malicous code

Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as str

MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), dom

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation

The AI Autonomous SOC & Purple-Team Engine

The autonomous pentester that proves its findings — AI-driven, evidence-first, behind-login.

Claude skill that catches hidden prompt-injection text in documents before acting on them

AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for agentic AI components.

NSAuditor AI Community — open-source network security scanner. 27 discovery plugins, structured findings, SARIF/CSV output, MCP integration,

Open-source runtime security and execution control for autonomous AI agents. ALLOW, BLOCK, ESCALATE at the execution boundary with auditable

Praxis Policy Engine (PPE)

Visual threat modeling tool covering AI, LLM, agentic systems, and post-quantum cryptography

See the AI keys and agents you can't. A read-only check for your Mac, Windows & Linux from GIRD.

哥斯拉 MCP 无头版：不启动哥斯拉 GUI，直接用 stdio/HTTP 驱动你的 Webshell（生成马 / 命令执行 / 文件管理），兼容 Claude Desktop、Claude Code、Cursor 等 MCP 客户端。基于 hkdonline/Godzilla-

📜🦀🌐 Intelligent, Secure and Effortless Super Full-Stack Framework 🌐🦀📜"Rust for those who want to build securely and easily, but not suffer"

Find known secrets in your AI coding agent sessions (Claude Code, Codex, Cursor), then guard the next one with local hooks that trace risky