Havuz

Open Agent Trust Infrastructure (OATI) — an open standard for verifiable AI agent identity, delegated authority, policy enforcement, and sig

Streaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-bound

Autonomous, read-only endpoint investigation via MCP. Ask a question about your fleet, get a narrative answer with containment recommendatio

Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural langu

Default-deny MCP/JSON-RPC security gateway for agent tool-call authorization, prompt-injection detection, exfiltration controls, and audit t

🛡️ Runtime guardrails for AI agents. Intercept and block unsafe tool calls caused by prompt injection.

Sandboxed multi-scanner security for AI skills, MCP servers, and package trees — coverage honesty, SIE judging, heatmap posture, guided tria

Eversec AIGov-Insight Web

AI security agent for the Python supply chain: scans packages, generates exploits, and validates them in Docker, autonomously.

An autonomous agentic pipeline that finds, proves, and patches real C memory-safety vulnerabilities end-to-end using a single 7B open-source

Lightweight, agent-friendly AI security toolkit for Node.js & TypeScript. Check if your agent has loaded the skill, Stop prompt injection, a

Ground truth for enterprise AI: your AI coding tools, your accounts and every session on your own server, from one web console, CLI or API.

Local credential control for AI coding agents.

AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for agentic AI components.

📜🦀🌐 Intelligent, Secure and Effortless Super Full-Stack Framework 🌐🦀📜"Rust for those who want to build securely and easily, but not suffer"

FinSecAI: An experimental testbed for evaluating Prompt Injection, Jailbreak, and data extraction vulnerabilities in financial LLM agents vi

Python SDK for accurate and verifiable agent tool use. Agents verify that answers came from the right source and were not changed. Downstrea

NSAuditor AI Community — open-source network security scanner. 27 discovery plugins, structured findings, SARIF/CSV output, MCP integration,

Static security scanner for npm/PyPI packages, MCP servers, agent skills and repos. Runs locally, never runs the code, no LLM. CLI, Claude C

Security scanner for AI agent skills. Flags known prompt-injection, data-exfiltration and malicious-payload patterns before you install

Free security skills for AI-built apps — run /lictor-security-check in Claude Code before you ship. Plain English, read-only, no telemetry.

An open-source AppSec agent that reasons like an analyst: real scanners, your org's context, and a conversation instead of 400 findings.

Zero-Trust Semantic Scraper & Firewall Proxy for AI Coding Agents. Intercepts and neutralizes web-scraped prompt injections locally before t

Highly isolated Linux container environments optimized specifically for mcp-servers. Secure AI agent tool execution.

Open-source config scanner for AI coding agents: scores the permissions, hooks, sandbox and MCP settings of Claude Code, Codex, Cursor and G

Harness-driven terminal AI agent for authorized security assessment, with TUI, headless automation, persistent context, 150 built-in skill

AI-powered vulnerability triage platform for Python projects. KIRTA combines SBOM, SCA, static code analysis, call maps, and AI explanations

Offline, read-only MCP config checkup for individual agent users. Zero dependencies, 28 rules incl. Chinese tool-description poisoning detec