Havuz

Open-source security for AI coding agents: record, detect and block at the tool boundary, with a verifiable audit trail in the SIEM you alre

Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as str

Local security proxy that keeps secrets and sensitive data out of AI requests. Supports Codex, Claude Code and more.

agents that run on your claude subscription. multi-agent, sandboxed by default. polished telegram UI.

Tamper-evident evidence and verification layer for AI agents. Verify any agent's session offline with just openssl. No cloud, no lock-in.

MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), dom

Self-hosted AI-assisted CTI-to-detection workbench for ATT&CK mapping, IOC/CVE intelligence, Threat Radar, malware triage, Attack Simulation

Concurrent Go CLI that detects hidden prompt-injection content in documents — invisible Unicode, homoglyphs, hidden HTML, and known trigger

Myrtia — agent-native red teaming for LLMs and AI agents: a deliberating council of attacker models (propose, cross-critique, Borda vote, ch

Eversec AIGov-Insight Web

The AI Autonomous SOC & Purple-Team Engine

An open database of real-world AI agent incidents.

An OWASP-aligned intentionally vulnerable platform for learning and testing AI, LLM, RAG, MCP, and Agentic AI security.

Red-team your RAG pipeline for prompt injection, source-document leakage, and cross-document smuggling, in CI. The gap between RAG eval (RAG

Python SDK for LLM guardrails with safety classification, PII detection, prompt injection defense, and grounding checks. Protect AI applicat

Runtime security for AI agents. In-process, zero dependencies, Apache 2.0.

Soup Wall: open-source security for AI agents and model traffic. Local Agent, Gateway, self-hosted Console. Apache-2.0.

An open library of 206 security skills for AI agents — pentest, bug bounty, CTF, reversing & defense across 23 domains, with CI-verified rou

The autonomous pentester that proves its findings — AI-driven, evidence-first, behind-login.

AI security agent for the Python supply chain: scans packages, generates exploits, and validates them in Docker, autonomously.

Open-source AI security tool to scan and fix vulnerabilities in your vibe-coded projects before you ship. AXguard by AwareXone.

Claude skill that catches hidden prompt-injection text in documents before acting on them

Security-testing methodology as portable, tool-agnostic agent skills for Claude Code and any agent runtime: white-box bug hunting, AI-agent

AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for agentic AI components.

Autonomous, read-only endpoint investigation via MCP. Ask a question about your fleet, get a narrative answer with containment recommendatio

Governed Postgres access for AI assistants: an MCP gateway with OAuth 2.1 and OIDC login, one Postgres role per person, database-enforced re

NSAuditor AI Community — open-source network security scanner. 27 discovery plugins, structured findings, SARIF/CSV output, MCP integration,

Open-source runtime security and execution control for autonomous AI agents. ALLOW, BLOCK, ESCALATE at the execution boundary with auditable

Tactical Identity Operator for Linux & Hybrid Active Directory

Praxis Policy Engine (PPE)

Enterprise Zero-Trust AI Security & Governance Gateway: Real-Time Prompt Injection Defense, Action Scoping, HITL Approvals, Post-Quantum Mer

A Claude / AI security review prompt for shipping safe apps. TRAP (True Readiness Audit Prompt) turns Claude Code, Cursor, or Copilot into a

哥斯拉 MCP 无头版：不启动哥斯拉 GUI，直接用 stdio/HTTP 驱动你的 Webshell（生成马 / 命令执行 / 文件管理），兼容 Claude Desktop、Claude Code、Cursor 等 MCP 客户端。基于 hkdonline/Godzilla-

Adversarial security testing for AI agents — prompt injection, tool misuse, memory poisoning, and MCP scanning, with CI-ready regression tes

Open-source AI security platform providing perimeter defense for LLMs and AI agents through swarm analysis, policy enforcement, adversarial

Security scanner for AI agent skills. Flags known prompt-injection, data-exfiltration and malicious-payload patterns before you install

Python SDK for accurate and verifiable agent tool use. Agents verify that answers came from the right source and were not changed. Downstrea

Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural langu

Visual threat modeling tool covering AI, LLM, agentic systems, and post-quantum cryptography

See the AI keys and agents you can't. A read-only check for your Mac, Windows & Linux from GIRD.

Ground truth for enterprise AI: your AI coding tools, your accounts and every session on your own server, from one web console, CLI or API.

📜🦀🌐 Intelligent, Secure and Effortless Super Full-Stack Framework 🌐🦀📜"Rust for those who want to build securely and easily, but not suffer"

An autonomous agentic pipeline that finds, proves, and patches real C memory-safety vulnerabilities end-to-end using a single 7B open-source

Keep your sensitive credentials out of the agents you build and the coding agent you use. Test any agent with planted fake keys, or see whic

Free security skills for AI-built apps — run /lictor-security-check in Claude Code before you ship. Plain English, read-only, no telemetry.

The control layer for agentic AI. A protocol-aware proxy that applies identity, policy, trust and payment controls to A2A, MCP and DIDComm t

Open-source guardrails for AI agents powered by decision models like Jev; checks prompts, retrieved content, tool calls and responses for pr

Static security review for AI agent configs (LangGraph, CrewAI, OpenAI Agents, MCP): maps source-to-tool flows and flags untrusted input tha

Default-deny MCP/JSON-RPC security gateway for agent tool-call authorization, prompt-injection detection, exfiltration controls, and audit t

BloodHound-style risk analysis for multi-agent AI architectures. Parses CrewAI, Dify, LangGraph, or generic YAML into a typed capability gra