Havuz

Enterprise Zero-Trust AI Security & Governance Gateway: Real-Time Prompt Injection Defense, Action Scoping, HITL Approvals, Post-Quantum Mer

See the AI keys and agents you can't. A read-only check for your Mac, Windows & Linux from GIRD.

Offline, read-only MCP config checkup for individual agent users. Zero dependencies, 28 rules incl. Chinese tool-description poisoning detec

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

哥斯拉 MCP 无头版：不启动哥斯拉 GUI，直接用 stdio/HTTP 驱动你的 Webshell（生成马 / 命令执行 / 文件管理），兼容 Claude Desktop、Claude Code、Cursor 等 MCP 客户端。基于 hkdonline/Godzilla-

Agent Emergency Protocol Incident Codes: a vendor-neutral runtime incident-code language for autonomous AI agents. Created by Mitthan Meena.

Tactical Identity Operator for Linux & Hybrid Active Directory

Open-source guardrails for AI agents powered by decision models like Jev; checks prompts, retrieved content, tool calls and responses for pr

Governed Postgres access for AI assistants: an MCP gateway with OAuth 2.1 and OIDC login, one Postgres role per person, database-enforced re

The network layer for AI agents. Reach your customers' on-prem data, show what you build, keep it running — through one relay that your mac

The control layer for agentic AI. A protocol-aware proxy that applies identity, policy, trust and payment controls to A2A, MCP and DIDComm t

Observe AI agent runs and control consequential actions. Signed policies, exact-action approvals, AuthZEN API vetoes and evidence. MCP gatew

Universal AI Charter: plain-language governance principles and a public certification registry for AI models, built on disclosure instead of

An open source, self-hosted, privacy-focused AI workbench

Myrtia — agent-native red teaming for LLMs and AI agents: a deliberating council of attacker models (propose, cross-critique, Borda vote, ch

Adversarial security testing for AI agents — prompt injection, tool misuse, memory poisoning, and MCP scanning, with CI-ready regression tes

A codebase scanner that helps you not run malicous code

An open database of real-world AI agent incidents.

Screens an AI agent's tool calls before they run and tool results before the agent reads them. An MCP proxy plus a hooks adapter for a clien

Sentinel shows what a file would make your AI coding agent do. Static analyzer, merge gate and signed lockfile for CLAUDE.md, AGENTS.md, .cu

Open-source AI security tool to scan and fix vulnerabilities in your vibe-coded projects before you ship. AXguard by AwareXone.

Claude skill that catches hidden prompt-injection text in documents before acting on them

Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali

A Geiger counter for AI agents — one read-only command that inventories every agent, MCP server, plugin, and AI extension on a machine

Soup Wall: open-source security for AI agents and model traffic. Local Agent, Gateway, self-hosted Console. Apache-2.0.

Find known secrets in your AI coding agent sessions (Claude Code, Codex, Cursor), then guard the next one with local hooks that trace risky

Deception-layer honeypot that captures & reverse-controls AI pentest agents — embedded decoys, prompt-injection counter-offense, MCP honeypo

Practical engineering knowledge for building and operating production AI systems — LLMs, RAG, agents, inference, evaluation, system design,

Open-source digital forensics and incident response for AI agents (Claude Code, Codex, Cursor, Gemini, Copilot…). One command: detect → coll

Protecting digital communications against audio deepfakes with real-time AI. This system analyzes audio streams to detect synthesized voices

Pre-production checklists for solo founders. 4,685 items, 88% portable to any stack, 26 stack supplements — plus AI/agent security and the b

Visual threat modeling tool covering AI, LLM, agentic systems, and post-quantum cryptography

DodoGuard: Take AI Agents to Production. Test, validate, and operate AI Agents before and after deployment.for Dify, Coze, FastGPT, n8n, Ten

OpenKeylet — Local password and credential manager for AI agents via MCP. Use passwords, API keys, SSH, and TOTP while keeping hidden plaint

Este es mi acordeón para ayudarte a pasar la certificación AB-730 de Microsoft, Profesional en Negocios de IA. A pesar de que este acordeón

Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero te

AI Agent Identity and Access Management and Inference Firewall

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

Policy-aware static taint analysis for detecting sensitive-data flows into LLM APIs.

Keep your sensitive credentials out of the agents you build and the coding agent you use. Test any agent with planted fake keys, or see whic

Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.

Security-testing methodology as portable, tool-agnostic agent skills for Claude Code and any agent runtime: white-box bug hunting, AI-agent

Static security review for AI agent configs (LangGraph, CrewAI, OpenAI Agents, MCP): maps source-to-tool flows and flags untrusted input tha

Testing and observability for multi-agent delegation, MCP tools, permissions, sandboxed actions, prompts, and workflow replay.

Convert public bug bounty hackerone reports (9,950) into reusable AI security skills and vulnerability knowledge.

Open-source, self-hosted AI agent for terminal, Telegram and Raspberry Pi. Local Ollama or Claude/Codex workers, enforced by a deterministic

Document extraction and validation for logistics companies.

Praxis Policy Engine (PPE)

An open library of 206 security skills for AI agents — pentest, bug bounty, CTF, reversing & defense across 23 domains, with CI-verified rou