Havuz

An OWASP-aligned intentionally vulnerable platform for learning and testing AI, LLM, RAG, MCP, and Agentic AI security.

A curated collection of AI SecOps 24 SKILL.md capabilities for security work offensive security, SOC and detection engineering, cloud and Ku

Harness-driven terminal AI agent for authorized security assessment, with TUI, headless automation, persistent context, 150 built-in skill

CI-native agent CLI tool for deterministic pipeline gating.

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation

Autonomous, read-only endpoint investigation via MCP. Ask a question about your fleet, get a narrative answer with containment recommendatio

Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI co

📜🦀🌐 Intelligent, Secure and Effortless Super Full-Stack Framework 🌐🦀📜"Rust for those who want to build securely and easily, but not suffer"

Zero-Trust Semantic Scraper & Firewall Proxy for AI Coding Agents. Intercepts and neutralizes web-scraped prompt injections locally before t

Highly isolated Linux container environments optimized specifically for mcp-servers. Secure AI agent tool execution.

Prompt-injection guardrail for LLM applications. Compact model that outperforms larger open-source guards. No regex, no signatures. Demo: an

An open-source AppSec agent that reasons like an analyst: real scanners, your org's context, and a conversation instead of 400 findings.

Free security skills for AI-built apps — run /lictor-security-check in Claude Code before you ship. Plain English, read-only, no telemetry.

Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS,

Open-source runtime AI agent security tool - monitors and controls AI agents, catching malicious tool use, prompt injection, and policy drif

👻 AI-Powered Pentesting Command Center — Autonomous security testing with real-time streaming, self-improving AI, unlimited tool iterations,

🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 1

Break your AI before they do. Join Discord: https://discord.gg/n22d9s3xM

Open-source config scanner for AI coding agents: scores the permissions, hooks, sandbox and MCP settings of Claude Code, Codex, Cursor and G

AI-powered vulnerability triage platform for Python projects. KIRTA combines SBOM, SCA, static code analysis, call maps, and AI explanations

AI agent firewall that intercepts tool calls (file, shell, network) and enforces deterministic policies at sub-microsecond latency using CEL

Claude Code ve uyumlu agent harness'leri için web güvenliği ve red-team çalışmalarına yönelik beceriler, komutlar ve iş akışları sunan bir skill bundle'dır.

Neden yükseliyor · 145 günlük yaşına göre 4.671 yıldız ve son 28 günde 37 commit dikkat çekiyor; bu, güncel geliştirme ve görünürlük sinyali. Ancak 3 farklı yazarla katkı tabanı dar ve README'deki 'battle-tested' iddiası bağımsız kullanım verisiyle doğrulanmıyor.

AiSOC, güvenlik telemetrisini birleştirip tehditleri tespit eden ve AI agent ile incelerken karar adımlarını kayda alan, self-hosted bir SOC platformudur.

Neden yükseliyor · 149 günlük yaşına rağmen 2.370 yıldız ve son 28 günde 247 commit dikkat çekiyor; self-hosted kurulum, yerel modelle API key gerektirmeyen başlangıç ve çalışır demo akışı projeyi denemeyi kolaylaştırıyor. Commit sayısı yüksek olsa da katkı 3 farklı yazarla sınırlı; yükselişin nedenini doğrudan doğrulayacak benimsenme verisi yok.

A deterministic privacy boundary between your data and AI.

Trust nothing. Ship safely. — Skeptical-reading and prompt-injection defense skill for AI agents. Provenance tagging, red-flag patterns, ref

Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây

Project Tapestry aims to give every nation and participant frontier AI they can call their own — uniting a global consortium to train a shar

27 scope-enforced AI agents that run the full pentest kill-chain (recon → exploit → post-ex → DFIR → report) as a one-command Claude Code pl

Python SDK for accurate and verifiable agent tool use. Agents verify that answers came from the right source and were not changed. Downstrea

Executable security regression testing for agentic applications and MCP-integrated systems.

Outside-in replication of Anthropic's Mythos Preview / Project Glasswing — open-source agentic vulnerability-discovery scaffold on Claude Op

AI security agent for the Python supply chain: scans packages, generates exploits, and validates them in Docker, autonomously.

pytest for AI agents - Autonomous red-teaming, behavioral monitoring & security testing for LLM agents

ADR, AI agent’ları keşfetmek, etkinliklerini gözlemlemek ve riskli davranışları tespit etmek için araçlar ile benchmark’lar sunan açık kaynaklı bir güvenlik sistemidir.

Neden yükseliyor · AI agent güvenliği güncel ve kurumsal ölçekte büyüyen bir ihtiyaç; Uber’in projeyi açık kaynak olarak yayımlaması, README’de üretimde kullanıldığını ve MLSys 2026’da kabul edilen bir makaleyle desteklendiğini belirtmesi ilgiyi artırıyor. 167 günde 1.620 yıldızın yanı sıra son 28 gündeki 44 commit ve 15 farklı yazar, kayda değer proje etkinliğine işaret ediyor; ancak yıldız geçmişi olmadan yükseliş hızını doğrulamak mümkün değil.

A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chains,

AI Firewall & LLM security toolkit - protect your AI applications from prompt injection, jailbreaks, PII leakage, and adversarial attacks

Local security proxy that keeps secrets and sensitive data out of AI requests. Supports Codex, Claude Code and more.

Security scanner for AI agent skills. Flags known prompt-injection, data-exfiltration and malicious-payload patterns before you install

AI agent benchmark hackability scanner — find evaluation vulnerabilities before they undermine your results

AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for agentic AI components.

250+ real-world TypeScript AI projects: workflows, agents, and multi-agent systems with production-ready architecture, not chatbot demos.

Public SDKs and integration contracts for Armorer Guard.

Get Claude Code and other AI agents approved for use at work — deterministic guardrails on every tool call, tamper-evident audit logs, and a

A privacy-first AI agent that sanitizes your prompts locally with a local LLM before forwarding to remote LLM APIs.

Autonomous AI-powered penetration testing platform. LLM-driven recon, vulnerability analysis, and exploit validation for internal & external

Open-source adversary emulation for AI agents and MCP servers.

NSAuditor AI Community — open-source network security scanner. 27 discovery plugins, structured findings, SARIF/CSV output, MCP integration,

Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysi

🛡️ A modern, AI-powered WAF with visual forensic playback via rrweb. Protect your web apps with LLM-driven threat detection, real-time visua

Defense-in-depth security toolkit for LLM agents — taint tracking, proxy secret guard, policy engine, and red-team benchmarking