Havuz

Codex Security, kod depolarındaki güvenlik açıklarını taramak, doğrulamak ve düzeltme önerileri sunmak için CLI ve TypeScript SDK sağlar.

Neden yükseliyor · 76 günlük yaşına karşın yüksek yıldız sayısı ve son 28 gündeki 188 commit ile 20 farklı yazar, belirgin ilgi ve aktif geliştirme gösteriyor; OpenAI markası da görünürlüğüne katkıda bulunabilir. Bu veriler tek başına tarama kalitesini veya üretim ortamında benimsenmeyi kanıtlamaz.

AiSOC, güvenlik telemetrisini birleştirip tehditleri tespit eden ve AI agent ile incelerken karar adımlarını kayda alan, self-hosted bir SOC platformudur.

Neden yükseliyor · 149 günlük yaşına rağmen 2.370 yıldız ve son 28 günde 247 commit dikkat çekiyor; self-hosted kurulum, yerel modelle API key gerektirmeyen başlangıç ve çalışır demo akışı projeyi denemeyi kolaylaştırıyor. Commit sayısı yüksek olsa da katkı 3 farklı yazarla sınırlı; yükselişin nedenini doğrudan doğrulayacak benimsenme verisi yok.

RAM efficient terminal agent harness for coding, cybersecurity, and automation.

0, tarayıcı, terminal ve MCP üzerinden güvenlik iş akışları çalıştırıp bulguları iş etkisine göre önceliklendiren açık kaynak bir güvenlik platformudur.

Neden yükseliyor · 46 günde 492 yıldız ve son 28 günde 677 commit dikkat çekici bir ivmeye işaret ediyor; YC desteği ve browser, CLI, MCP birleşimi de görünürlüğü artırabilir. Ancak commitlerin tek farklı yazardan gelmesi, hareketliliğin geniş topluluk katkısı anlamına gelmediğini gösteriyor.

Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8

Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomo

OpenOSINT, OSINT araştırmalarını doğal dil üzerinden yürüten; REPL, CLI, Web UI ve MCP arayüzleri sunan bir Python aracıdır.

Neden yükseliyor · 144 günlük yaşına karşılık 1.657 yıldız ve son 28 günde 30 commit, projeye yönelik ilgi ve yakın dönem geliştirme temposuna işaret ediyor; ancak farklı yazar sayısının 2 olması sürdürülebilirlik kanıtını sınırlıyor.

Self-hosted dark web OSINT platform. Automated threat intelligence from query to graph in 13 steps. Free alternative to Recorded Future, Dar

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

Free email OSINT tool, 5000+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess

🔎 Username, email & phone OSINT — 9,700+ lookup checks from 19 projects, with profile enrichment, bulk searches, evidence graphs and expert-

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own mo

Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evide

A structured, versioned archive of adversarial prompt engineering techniques against Large Language Models — for AI safety research, red-tea

Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of

AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/a

Self-hosted Microsoft 365 security operations dashboard — aggregates Defender XDR, Entra ID Protection, Intune, Compliance and more into one

Open Source Agentic Security Scanner

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay y

A professional, high-fidelity de-anonymization and vulnerability diagnostic framework. Features a zero-coupling modular architecture for bro

Akashic is an open-source Palantir alternative for connecting, exploring, and analyzing complex data. Fully self-hosted, privacy-first, and

pentest-ai-agents, Claude Code içinde yetkili penetration testing iş akışlarına yönelik uzmanlaşmış subagent’lar sunan bir koleksiyondur.

Neden yükseliyor · 188 günde 2301 yıldız, Claude Code için doğrudan kurulabilen 50 uzman agent ve geniş güvenlik kapsamına yönelik belirgin ilgi gösteriyor. Bunun benimsenme veya çıktı kalitesi kanıtı olmadığını; son 28 günde commit ve farklı yazar bulunmadığını not etmek gerekir. Yükselişin özel nedenini mevcut verilerle doğrulamak mümkün değil.

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK,

DeepSec — AI Security Offense & Defense Platform. Shield audits AI-generated code for hallucinated packages, missing safeguards & AI pattern

High-performance OSINT/CTI framework for automated identity pivoting and risk analysis across 120+ sources.

Lyrie.ai — The world's first autonomous AI cybersecurity agent. Built by OTT Cybersecurity LLC.

Network traffic visualization tool

A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scorin

Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, expla

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 cat

Tactical AI Workspace Monitor & EDR

IAGA Sentinel sits next to your AI agents and answers the one question the agent itself cannot.

Run Windows and Linux programs on Windows, Linux and Android. A user-mode NT and Linux kernel emulator with WHP/KVM acceleration.

A Python CLI tool that scans all repositories owned by a GitHub user/org for accidentally committed secrets (API keys, tokens, passwords, pr

Laravel Security Tool

Open-source, self-hosted OSINT investigation platform: turn documents into a live, investigated entity graph. Autonomous agent, graph analyt

🤖 Autonomous AI-powered ethical hacking agent powered by Llama 3.1 70B on NVIDIA NIM

Vigilyx is a Rust-powered email security analysis platform/Gateway for passive traffic monitoring and inline MTA inspection, with threat det

Rational engineering system prompt for Codex and LLMs — focused on accuracy, software engineering, AI, security research, bug bounty, and re

Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault,

27 scope-enforced AI agents that run the full pentest kill-chain (recon → exploit → post-ex → DFIR → report) as a one-command Claude Code pl

Free, open-source tool to build a NIST CSF 2.0 Current Profile and gap analysis from an organization's documents (AI-assisted, human-validat

Audit and fix your Mac's security in one command. No agent, no signup, open source.

👻 AI-Powered Pentesting Command Center — Autonomous security testing with real-time streaming, self-improving AI, unlimited tool iterations,

AI Web Solutions and Python Automation Projects by Krish Sharma 2026

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and L

Open-source practical cybersecurity learning platform with structured lessons, guided labs, progress tracking, and a custom Lab Engine.