Havuz

The AI security agent guards your code.

AI Firewall & LLM security toolkit - protect your AI applications from prompt injection, jailbreaks, PII leakage, and adversarial attacks

Self-hosted LLM security proxy. PII redaction, prompt injection defense, KVKK/GDPR/PCI-DSS compliance. Sub-millisecond latency

Open database of system prompts extracted from frontier LLMs using JustAsk

Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

A modular threat detection library for AI and LLM pipelines. It provides language-agnostic guardrails through a configurable pipeline of loa

RAG pipeline security testing toolkit - 27 techniques across 6 kill chain phases, mapped to MITRE ATLAS

Verify which LLM an OpenAI-compatible API really serves — single-token behavioral fingerprinting (Jensen-Shannon) from the paper "One Token

Local-first verification layer for AI agents: evidence, provenance, policy gates, human approval, and auditable Trust Receipts before a clai

Trust nothing. Ship safely. — Skeptical-reading and prompt-injection defense skill for AI agents. Provenance tagging, red-flag patterns, ref

🛡 The reference playbook for pentesting AI chatbots & LLM-powered apps in one place. Ready-to-use payloads covering the full OWASP LLM Top 1

Detect and patch vulnerabilities in AI-generated Python code — VS Code extension

Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and

Local-first security scanner, MCP protocol inspector, dynamic fuzzer, Docker sandbox, and report generator for Model Context Protocol server

Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as str

Local security proxy that keeps secrets and sensitive data out of AI requests. Supports Codex, Claude Code and more.

Free local guardrail for AI coding agents: every tool_call judged on-device (regex + Laya), allow/review/block

Concurrent Go CLI that detects hidden prompt-injection content in documents — invisible Unicode, homoglyphs, hidden HTML, and known trigger

Myrtia — agent-native red teaming for LLMs and AI agents: a deliberating council of attacker models (propose, cross-critique, Borda vote, ch

🛡️ Regex catches 0%, Meta's Prompt Guard 2 catches 1% of 629 realistic AgentDojo injection attacks when they're buried in tool output. Repro

An OWASP-aligned intentionally vulnerable platform for learning and testing AI, LLM, RAG, MCP, and Agentic AI security.

Red-team your RAG pipeline for prompt injection, source-document leakage, and cross-document smuggling, in CI. The gap between RAG eval (RAG

An automated, multi-turn LLM red-teaming pipeline that pits an Attacker model against a Target model to evaluate safety boundaries, featurin

Python SDK for LLM guardrails with safety classification, PII detection, prompt injection defense, and grounding checks. Protect AI applicat

An open database of real-world AI agent incidents.

Soup Wall: open-source security for AI agents and model traffic. Local Agent, Gateway, self-hosted Console. Apache-2.0.

Noisegate: a differential privacy gateway that lets an untrusted LLM agent query sensitive data over MCP (Model Context Protocol), with a fo

The execution safety layer for AI agents.

Runtime security platform for LLM agent tool calls on Kubernetes

Security-First Agentic IDE Coding Harness

AI security agent for the Python supply chain: scans packages, generates exploits, and validates them in Docker, autonomously.

An open library of 206 security skills for AI agents — pentest, bug bounty, CTF, reversing & defense across 23 domains, with CI-verified rou

Free NVIDIA DLI course: build, coordinate, and secure AI agents with NemoClaw and OpenShell. Browser-based, no GPU required. Available in En

The autonomous pentester that proves its findings — AI-driven, evidence-first, behind-login.

Open-source AI security tool to scan and fix vulnerabilities in your vibe-coded projects before you ship. AXguard by AwareXone.

Claude skill that catches hidden prompt-injection text in documents before acting on them

AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for agentic AI components.

Governed Postgres access for AI assistants: an MCP gateway with OAuth 2.1 and OIDC login, one Postgres role per person, database-enforced re

Prompt-injection, jailbreak and secret-leak defense for DeepSeek Harness: Aho-Corasick detection with allow/ask/block interception and sanit

Open-source runtime security and execution control for autonomous AI agents. ALLOW, BLOCK, ESCALATE at the execution boundary with auditable

Screens an AI agent's tool calls before they run and tool results before the agent reads them. An MCP proxy plus a hooks adapter for a clien

Scan a codebase for AI SDKs, MCP servers and agent tools; map risks to NIST AI RMF, ISO 42001, EU AI Act and the OWASP LLM and Agentic Top 1

Security-testing methodology as portable, tool-agnostic agent skills for Claude Code and any agent runtime: white-box bug hunting, AI-agent

Open-source AI security platform providing perimeter defense for LLMs and AI agents through swarm analysis, policy enforcement, adversarial

Recovering verbatim private reasoning from Claude extended-thinking signatures, with a local byte-exact verifier.

Security scanner for AI agent skills. Flags known prompt-injection, data-exfiltration and malicious-payload patterns before you install

Python SDK for accurate and verifiable agent tool use. Agents verify that answers came from the right source and were not changed. Downstrea

PII redaction for ChatGPT, claude.ai and Claude Code. Masks names, emails, phone numbers, cards, IBANs and IDs before they leave your machin

Enterprise Zero-Trust AI Security & Governance Gateway: Real-Time Prompt Injection Defense, Action Scoping, HITL Approvals, Post-Quantum Mer

Visual threat modeling tool covering AI, LLM, agentic systems, and post-quantum cryptography