Havuz

Codex Security, kod depolarındaki güvenlik açıklarını taramak, doğrulamak ve düzeltme önerileri sunmak için CLI ve TypeScript SDK sağlar.

Neden yükseliyor · 76 günlük yaşına karşın yüksek yıldız sayısı ve son 28 gündeki 188 commit ile 20 farklı yazar, belirgin ilgi ve aktif geliştirme gösteriyor; OpenAI markası da görünürlüğüne katkıda bulunabilir. Bu veriler tek başına tarama kalitesini veya üretim ortamında benimsenmeyi kanıtlamaz.

Mantis, AI coding agents ile kod tabanlarındaki güvenlik açıklarını araştırma, yeniden üretme ve düzeltme iş akışları kurmaya yönelik modüler bir toolkit ve referans harness sunuyor.

Neden yükseliyor · AI agent’lar ile güvenlik açığı bulma ve düzeltme ilgisinin artması projeye görünürlük kazandırmış olabilir; ancak yalnızca verilen ölçümlerden yükselişin nedenini doğrulamak mümkün değil. 104 günlük yaşında 1717 yıldız dikkat çekici ilgi gösterse de son 28 gündeki 5 commit ve 1 farklı yazar, güncel geliştirme hareketliliğinin sınırlı olduğuna işaret ediyor.

Catch risky npm dependency changes before they merge.

Local, evidence-based application security assessment engine and Claude Code plugin

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK,

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay y

DianXing - AI-Driven End-to-End Code Security Auditing

Open-source antivirus and firewall for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugi

Agent Skill that lets Claude Code, Codex, Cursor, Copilot and other AI agents set up and harden a Debian/Ubuntu VPS without locking you out:

Open-source AI security verification for model artifacts, live endpoints, MCP servers, and recorded agent traces. Reproducible evidence for

Skill para Claude, Codex, Cursor e outros agentes: check pré-lançamento do seu app com 20 checagens de segurança + 10 de prontidão (Lovable,

Let AI agents investigate and operate infrastructure through declared actions, bounded by policy and host-side checks. Approvals when requir

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

Harden your package manager configs against supply chain attacks.

Catch .env secrets leaking into git: a pre-commit hook and CLI that fails when an API key or any value of your env files is staged, tracked

Open-source AI agent framework for security engineering across AWS, GCP, Azure, Kubernetes, GitHub & GitLab: AI-powered security review, fin

Security testing that runs inside the coding agent you already use. Source-available, not open source.

Govern: one Decionis verdict before a workflow step runs — a deploy, a migration, an infrastructure change, an agent's action — with a signe

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free

Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 cat

Policy-aware static taint analysis for detecting sensitive-data flows into LLM APIs.

Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, expla

Your app is guilty until proven secure: an agent skill whose /hack-me breaks into your own running app, proves each bug with a real request,

Private, self-hosted AI-native software engineering suite — unified identity (GM) plus AI agents, code collaboration, artifact management, t

Subagent Verification for Claude AI Code Networks 2026

Turn declarative exercises into reproducible, runnable and verifiable lab environments

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed,

Automated Proof-of-Carrying Change Management for AIOps 2026

Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS,

Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS

Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, improved every release.

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

Let your AI agent use your passwords and API keys - without ever letting it see them

Policy guardrails for coding agents (Claude Code, Codex, Cursor) — every tool call is checked locally, before it runs.

A Python CLI tool that scans all repositories owned by a GitHub user/org for accidentally committed secrets (API keys, tokens, passwords, pr

A deliberately breakable three-tier platform plus a full DevOps / SRE / DevSecOps training curriculum (handbook, capstone assignment, soluti

DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。

Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.

Evidence-driven production readiness checklist for shipping web applications with confidence

Open-source AI security tool to scan and fix vulnerabilities in your vibe-coded projects before you ship. AXguard by AwareXone.

Audit and fix your Mac's security in one command. No agent, no signup, open source.

Evidence-backed attack paths, drift, and cost auditing for Hetzner Cloud.

Application security and governance platform — one check covers code flaws, leaked secrets, and dependency/image vulnerabilities, with merge

Adversarial security testing for AI agents — prompt injection, tool misuse, memory poisoning, and MCP scanning, with CI-ready regression tes

Audits AUR PKGBUILD updates before you install: detects structural changes, suspicious commands, typosquatting, and novelty signals, then pr

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PH

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT&CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Co

Open-source CPG-based interprocedural taint analysis + LLM triage, with a Ghidra-style audit workbench. Runs fully offline.