Havuz

Visual threat modeling tool covering AI, LLM, agentic systems, and post-quantum cryptography

Safety benchmark for personal AI agents under realistic prompt injection. 120 test cases across 5 professional domains, 3 injection vectors,

Find known secrets in your AI coding agent sessions (Claude Code, Codex, Cursor), then guard the next one with local hooks that trace risky

Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural langu

Agents propose. People approve. Change control for AI agents: everyday work runs on its own, anything an agent can't take back waits for a t

Skill router and prompt-injection firewall for AI coding agents: gives Claude Code, Codex and Cursor the few skills, MCP servers and tools e

Keep your sensitive credentials out of the agents you build and the coding agent you use. Test any agent with planted fake keys, or see whic

Open-source guardrails for AI agents powered by decision models like Jev; checks prompts, retrieved content, tool calls and responses for pr

Static security review for AI agent configs (LangGraph, CrewAI, OpenAI Agents, MCP): maps source-to-tool flows and flags untrusted input tha

BloodHound-style risk analysis for multi-agent AI architectures. Parses CrewAI, Dify, LangGraph, or generic YAML into a typed capability gra

Passive LLM Conversation Capture & Sensitive Data Exposure Research

Document extraction and validation for logistics companies.

Static security scanner for npm/PyPI packages, MCP servers, agent skills and repos. Runs locally, never runs the code, no LLM. CLI, Claude C

Pre-production checklists for solo founders. 4,685 items, 88% portable to any stack, 26 stack supplements — plus AI/agent security and the b

🛡️ Runtime guardrails for AI agents. Intercept and block unsafe tool calls caused by prompt injection.

Auto-permission engine for Antigravity CLI (agy): deterministic AST parser + LLM classifier

Stateless governance proxy for MCP (2026-07-28): policy, dry-run, human confirmation, audit, tracing

Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero te

Credential isolation for AI agents — stop leaking secrets to your agents. TAP is a credential proxy: agents never see secret values; optiona

Streaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-bound

Open-source digital forensics and incident response for AI agents (Claude Code, Codex, Cursor, Gemini, Copilot…). One command: detect → coll

Agent Emergency Protocol Incident Codes: a vendor-neutral runtime incident-code language for autonomous AI agents. Created by Mitthan Meena.

Nephilex is an open-source AI Security Engineer that analyzes repositories, detects vulnerabilities, validates risks, explains findings, gen

Lightweight, agent-friendly AI security toolkit for Node.js & TypeScript. Check if your agent has loaded the skill, Stop prompt injection, a

FinSecAI: An experimental testbed for evaluating Prompt Injection, Jailbreak, and data extraction vulnerabilities in financial LLM agents vi

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

Open-source local MCP runtime that checks AI-agent tool calls, gates risky actions on approval, verifies results, and avoids blind retries a

A deterministic privacy boundary between your data and AI.

AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」（网安法·PIPL·等保2.0·数据出境·AI标识），并给出境内模型替代建议；可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源

Observe AI agent runs and control consequential actions. Signed policies, exact-action approvals, AuthZEN API vetoes and evidence. MCP gatew

Local-first verification layer for AI agents: evidence, provenance, policy gates, human approval, and auditable Trust Receipts before a clai

Open-source AI security verification for model artifacts, live endpoints, MCP servers, and recorded agent traces. Reproducible evidence for