Havuz

Open-source benchmark of 5 intentionally vulnerable web apps with 100 baseline vulnerabilities for evaluating AI penetration testing agents.

企业暴露面收集与持续监控（ASM）自托管系统：多源采集、存活与指纹富化、风险线索与变更对照。支持 Linux/Docker 一键部署。

The AI security agent guards your code.

AI Firewall & LLM security toolkit - protect your AI applications from prompt injection, jailbreaks, PII leakage, and adversarial attacks

Open source browser lab to build a simulated infrastructure, watch an attack move through it, and check whether your defense works.

Open Source Firewall IP List Publishing

reconnaissance for agent attack surfaces

Nutcracker is a powerful, modular and extensible framework designed for mobile security analysis and offensive threat intelligence. Detects

Local-first privacy toolkit. Map yourself against 400+ data brokers, send CCPA/GDPR deletion mail, and check password dumps. The vault never

Secrets scanner with a twist... this is for getting threat actor credentials from MALWARE. Acquire TA creds from FLOSS exports, memdumps, B

Zero-touch pipeline that turns newly weaponized CVEs from the CISA Known Exploited Vulnerabilities (KEV) catalog into production-ready Sigma

Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali

🛡️Self-hosted security analytics & threat detection for Discord servers. Real-time phishing, raids, spam detection. Privacy-first with GDPR

A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening (gM

Evidence-first AI OSINT casefile with 40 passive modules, live recon streaming, provenance-led reports, and an entity graph.

基于Agent驱动的网络安全流量监控与分析平台，下一代AI驱动的安全运营协作平台 — 智能告警研判、资产关联、协同处置与自动化报告生成，为护网行动增添一把利器。

Verifiable and free cloud compute for AI agents. webMCP + MCP native. Check out our sandboxed Beta + research in the README

BGNexa AI — Evidence intelligence for cybersecurity, privacy and regulatory readiness.

AI-powered deepfake detector that classifies uploaded face images and videos as Real or Fake with confidence scores. Full-stack app built wi

Declaratively deploy & manage multiple isolated AI agents on a single NixOS machine — each with its own secrets, skills, and personality.

Open-source asset inventory — turn scattered, contradictory tool data into one reliable inventory, then chat with it using the LLM of your c

xnew is a fast, low-memory CLI that appends only unique lines to files. Built in Go for large datasets, it streams input efficiently and sca

An OWASP-aligned intentionally vulnerable platform for learning and testing AI, LLM, RAG, MCP, and Agentic AI security.

LLM benchmark results for THOR forensic finding triage quality

A secure, production-ready Python CLI wrapper for Nmap that makes powerful scans easy and repeatable. Includes 12 built-in profiles (SYN, ag

Talk to your computer. Icebreaker transforms natural language into safe Linux actions through isolated AI brains, kernel-enforced sandboxes.

Ansible CIS Benchmark Compliance Remediation for DEBIAN13

Cybersecurity knowledge graph for code review with evidence-backed answers

AI-enhanced OSINT and situational awareness platform with live map layers, browser recon tools, and fusion dossiers.

AI Agent 的安全守门员。在API 返回结果用户确认执行之前，及时拦截危险内容。The safety gatekeeper for AI Agents. Timely intercept dangerous content before the API returns re

🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compiler-backed facts for humans and AI.

bb-huge 🤗 , Personal bug bounty findings hub and bug bounty orchestration for multiple agents

Sovereign OSINT platform for modern investigators. Local-first, open-source, and privacy-centric.

Install, run and verify OSINT tools from GitHub automatically, on any OS

High-performance Rust-based DNS-over-TLS (DoT) server with advanced ad-blocking for Android via Termux.

Terminal research and study client for MITRE ATT&CK®

Self-hosted counter-surveillance for the networks you control: map device and network exposure, verify trusted routes, and hold sensitive ac

LLM-first deception framework: "The honeypot that talks back!™"

Self-hosted, agentic vulnerability research for binaries & firmware: an AI agent decompiles, fuzzes, and verifies exploits inside a sandbox,

Passive blue-team security scanner — 582 read-only modules, plus 32 opt-in probes. Runs on your machine. No accounts. No telemetry.

ThreatRadar is an open-source Threat Intelligence pipeline for SOC and threat intelligence teams that ingests, enriches, scores, and validat

Defensive research and practical examples for DDoS detection, mitigation, and resilient web architecture.

An AI-driven tool designed to automate the detection of security vulnerabilities in Java source code.

OMCBench is a benchmark suite for evaluating malicious-code detection capabilities. The benchmark consists of a labeled set of 800 Python an

🛡️ Explainable AI Malware Analysis Platform with PE Static Analysis, YARA Engine, SHAP Explainability & Real-Time Dashboard

Repositório destinado a resumos e estudo do curso Cyber Academy (FEBRABAN)

An automated way to discover practical, hands on penetration testing projects using Claude, with structured learning roadmaps, relevant secu

FRIDAY is an autonomous cognitive AI operating system for memory, reasoning, voice, cybersecurity, and self-improvement. It runs locally and

Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural langu

🛡️ AI-powered reconnaissance framework unifying 130+ security tools — subdomain enum, vuln scanning, cloud/IoT recon, dark web monitoring &