Havuz

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs an

Blitz Strike, penetration-testing iş akışını MCP üzerinden sunan ve bulguları canlı doğrulamaya yönelen bir güvenlik aracıdır.

Neden yükseliyor · 15 günlük yaşına rağmen 512 yıldız almış; MCP tabanlı agent iş akışlarıyla penetration testing'i tek entegrasyonda toplama vaadi dikkat çekiyor. Ancak son 28 günde yalnızca 2 commit ve 1 farklı yazar görünmesi, bu ilginin aktif geliştirme veya topluluk katkısıyla henüz desteklenmediğini gösteriyor.

AutoCVE, kaynak kodu üzerinde agent tabanlı güvenlik denetimi yapıp bulguları doğrulamayı ve CVE başvuru raporları üretmeyi amaçlayan bir platformdur.

Neden yükseliyor · 104 günde 1416 yıldıza ulaşmış olması ve README’de 14 projede bir haftada 30 güvenlik açığı bulup başvuruya sunduğu iddiası dikkat çekiyor. Ancak yıldızlar ve README’deki sonuç beyanı tek başına etkinliğin kalitesini veya tekrarlanabilirliğini kanıtlamaz; son 28 gündeki 4 commit ve 2 farklı yazar aktivitenin sınırlı olduğuna işaret ediyor.

Local security intelligence for CVE triage - 40 data sources and 41 tools, risk scores and an MCP server for AI agents, all in native Rust.

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK,

Modern attack-surface reconnaissance & asset monitoring platform — rebuilt from classic ARL with async decoupled scheduling, enterprise asse

Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS

Agent-assisted maintainership and development framework for Apache projects — Triage, Mentoring, Drafting (agent-authored fixes with human r

An open database of real-world AI agent incidents.

AI 辅助的授权渗透测试平台（基于 Ed1s0nZ/CyberStrikeAI 二次开发）：单/多智能体交战、本地近5年 CVE 语料与每日增量同步、GitHub-C2 交接、经验总结人审入库、HITL 审批与审计。

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。

A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx

Feature-rich all-in-one self-hosted server & server fleet management (Web UI): patching, monitoring (agent + agentless/SNMP), CVE scanning,

Cache Commander — a TUI and MCP server to explore, audit, and clean developer cache directories. Scan for CVEs, find outdated packages, recl

OSINT tool for precise version fingerprinting of open-source web software

❄️ Static, serverless CVE radar — every new CVE from the last 30 days, ranked by real-world risk (KEV · EPSS · PoC · Metasploit · Nuclei · S

CVE ingestion + enrichment pipeline with an MCP server for AI agents.

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs,

🛡️ Turnkey cybersecurity lab for Hermes Agent — 397 CVE-driven skills, 152 tools, 28 frameworks (MITRE ATT&CK, MISP, CVSS, EPSS, OWASP, NIST

Outside-in replication of Anthropic's Mythos Preview / Project Glasswing — open-source agentic vulnerability-discovery scaffold on Claude Op

Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database

Self-hosted CVE triage for your root servers: Trivy scans, LLM-judged exploitability, only the findings that matter.

An AI chat agent (harness) with integrated tools, skills and an optional knowledge base. Chat with any OpenAI-compatible LLM, use built-in i

MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), dom

AI security agent for the Python supply chain: scans packages, generates exploits, and validates them in Docker, autonomously.

NSAuditor AI Community — open-source network security scanner. 27 discovery plugins, structured findings, SARIF/CSV output, MCP integration,