Havuz

An open-source AppSec agent that reasons like an analyst: real scanners, your org's context, and a conversation instead of 400 findings.

Document extraction and validation for logistics companies.

Open-source config scanner for AI coding agents: scores the permissions, hooks, sandbox and MCP settings of Claude Code, Codex, Cursor and G

Static security scanner for npm/PyPI packages, MCP servers, agent skills and repos. Runs locally, never runs the code, no LLM. CLI, Claude C

Pre-production checklists for solo founders. 4,685 items, 88% portable to any stack, 26 stack supplements — plus AI/agent security and the b

🛡️ Runtime guardrails for AI agents. Intercept and block unsafe tool calls caused by prompt injection.

Open Agent Trust Infrastructure (OATI) — an open standard for verifiable AI agent identity, delegated authority, policy enforcement, and sig

Highly isolated Linux container environments optimized specifically for mcp-servers. Secure AI agent tool execution.

Zero-Trust Semantic Scraper & Firewall Proxy for AI Coding Agents. Intercepts and neutralizes web-scraped prompt injections locally before t

Streaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-bound

Local credential control for AI coding agents.

Screens an AI agent's tool calls before they run and tool results before the agent reads them. An MCP proxy plus a hooks adapter for a clien

Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero te

Practical engineering knowledge for building and operating production AI systems — LLMs, RAG, agents, inference, evaluation, system design,

Harness-driven terminal AI agent for authorized security assessment, with TUI, headless automation, persistent context, 150 built-in skill

Convert public bug bounty hackerone reports (9,950) into reusable AI security skills and vulnerability knowledge.

Open-source, self-hosted AI agent for terminal, Telegram and Raspberry Pi. Local Ollama or Claude/Codex workers, enforced by a deterministic

Open-source digital forensics and incident response for AI agents (Claude Code, Codex, Cursor, Gemini, Copilot…). One command: detect → coll

Sentinel shows what a file would make your AI coding agent do. Static analyzer, merge gate and signed lockfile for CLAUDE.md, AGENTS.md, .cu

Agent Emergency Protocol Incident Codes: a vendor-neutral runtime incident-code language for autonomous AI agents. Created by Mitthan Meena.

Sandboxed multi-scanner security for AI skills, MCP servers, and package trees — coverage honesty, SIE judging, heatmap posture, guided tria

Lightweight, agent-friendly AI security toolkit for Node.js & TypeScript. Check if your agent has loaded the skill, Stop prompt injection, a

FinSecAI: An experimental testbed for evaluating Prompt Injection, Jailbreak, and data extraction vulnerabilities in financial LLM agents vi

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

Observe AI agent runs and control consequential actions. Signed policies, exact-action approvals, AuthZEN API vetoes and evidence. MCP gatew

AI-powered vulnerability triage platform for Python projects. KIRTA combines SBOM, SCA, static code analysis, call maps, and AI explanations

Offline, read-only MCP config checkup for individual agent users. Zero dependencies, 28 rules incl. Chinese tool-description poisoning detec