Havuz

One control plane for every AI asset — MCP servers, skills, agents, AI apps. Self-hosted ledger with lifecycle state machine, 85 permission

Verifiable research-report engine for DeepSeek Harness: content-addressed evidence ledger (claim-snapshot binding, tamper-evident) plus vers

Heuristic Solidity/DeFi security review toolkit — flags suspicious patterns to review, backed by Foundry scenarios. Educational / authorized

The black box for AI-written code. Passive decision graph linking every commit to the agent prompts behind it: drift detection, DLP audit of

Bounded, layered, approval-gated, auditable cross-session memory for DeepSeek Harness: a ctx.memory capability seam with a zero-dependency S

A GRC Compliance tool for SaaS products to manage the entire lifecycle of security audits.

ToolReplay, AI agent’ların tool-call transcript’lerini determinism, yinelenen çağrılar ve izin kapsamı açısından denetleyen bir Python CLI’dir.

Neden yükseliyor · AI agent’ların davranışını denetlenebilir ve tekrarlanabilir kılma ihtiyacına doğrudan hitap ediyor; README’de örnek girdi ve çıktıyla çalışan bir kullanım gösteriliyor. 13 günde 184 yıldız dikkat çekiyor, ancak son 28 günde 2 commit ve 1 farklı yazar bakım ve benimsenmenin sürdürülebilirliği için henüz zayıf kanıt.

22 production-grade skills for AI coding agents — setup, scope, discipline, code review, security, session management, governance, ops, and

EU AI Act compliance proxy for AI systems. Drop-in HTTP proxy that monitors every AI interaction for regulatory risks, logs to a tamper-proo

AI-powered multi-agent security auditor for Symfony applications, provider-agnostic via symfony/ai.

Inventario as-built y health check de servidores Windows en un solo .ps1

Self-hosted LLM gateway audit station: model fingerprint attribution, cache/tool/web/thinking evidence, IQ and integrity scores.

Audit and fix your Mac's security in one command. No agent, no signup, open source.

eBPF Prometheus exporter for AI-agent activity — per-agent tools, domains, ports, files, CPU & network — with a Grafana dashboard. A yeet se

Laravel audit log & change history with real actor attribution (user / job / command / scheduler), cross-model change traces, time machine,

Per-entry-point, navigable call-graph visualizations of Solidity repositories — for Web3 security auditors.

Audits AUR PKGBUILD updates before you install: detects structural changes, suspicious commands, typosquatting, and novelty signals, then pr

Open-source AI-powered website audit CLI using the OpenAI API for SEO, UX, accessibility, performance, trust, and content analysis.

Verify what your Claude Code agent actually did. Rashomon keeps an independent record of every tool call, subagent, failed command, and flag

DeepSeek Harness (DSH) plugin: a read-only ledger for the plugins you already have installed — a capability inventory with file:line evidenc

Keep growing TypeScript codebases maintainable. Trellis measures complexity, duplication, and import cycles, pinpoints structural debt, and

Analyze a git source code repository for health signals and project vitals

Deterministic, local-only audit reports for Claude Code AI agent sessions. Rust + SQLite. Zero network calls. MCP server for agents.

Audits the .claude/ ecosystem — skills, commands, hooks, agents, settings, plugins, memory — for dead references, weak triggers, token bloat

Zero-dependency CLI to scan, recommend, deduplicate, audit, and visualize Claude Code / Codex skills and MCP servers.

Solana's SOL-0XX security standard — bug-class rules distilled from $514M of real exploits, firing as you code in every AI tool, editor & CI

Hermes Agent-focused architecture and runtime health checks

Web UI for remote firewall security audits over SSH (iptables/nftables/ufw)

Tamper-evident evidence and verification layer for AI agents. Verify any agent's session offline with just openssl. No cloud, no lock-in.

Enterprise AI traffic gateway — unified compliance, routing across 20+ LLM providers, semantic cache, quotas, and audit. SDK / network / OS-

AI-powered pre-submission audit for Apple App Store & Google Play Store. 140+ rules across 21 categories to catch rejection risks before you

Deterministic authorization + tamper-evident audit for AI agents, humans, and workloads — one principal type, safety invariants machine-chec

Permanent code intelligence layer. Learns what matters, expires what changed, proves what existed. Content-addressed graph with Merkle proof

Open-source Supabase security auditor: detects RLS-disabled tables, public buckets, exposed SECURITY DEFINER functions. Active anonymous pro

Upkeep — an AI audit crew for your repo. Catches docs/spec/asset drift with evidence; output-only. Claude Code plugin/skill + reusable CI wo

Live audit log of every command, file, and network connection a Claude Code (or any matched) session makes, from the kernel.

A self-correcting system of nested engineering loops: plan & execute repo work; safely implement audit findings; design greenfield & improve

Reproducible artifact manifests, sandbox-output verification, and evidence-bundle validation for artifact-heavy workflows.

CLI, MCP server, and Skill for safe local Codex session audit, cleanup, restore, and verification.