Havuz

Open-source AI security platform providing perimeter defense for LLMs and AI agents through swarm analysis, policy enforcement, adversarial

Security scanner for AI agent skills. Flags known prompt-injection, data-exfiltration and malicious-payload patterns before you install

Python SDK for accurate and verifiable agent tool use. Agents verify that answers came from the right source and were not changed. Downstrea

PII redaction for ChatGPT, claude.ai and Claude Code. Masks names, emails, phone numbers, cards, IBANs and IDs before they leave your machin

Visual threat modeling tool covering AI, LLM, agentic systems, and post-quantum cryptography

Free, local-first academic integrity checker and MCP server: citation hallucination detection, AI-text and plagiarism signals, venue guideli

Safety benchmark for personal AI agents under realistic prompt injection. 120 test cases across 5 professional domains, 3 injection vectors,

Find known secrets in your AI coding agent sessions (Claude Code, Codex, Cursor), then guard the next one with local hooks that trace risky

Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural langu

Agents propose. People approve. Change control for AI agents: everyday work runs on its own, anything an agent can't take back waits for a t

Skill router and prompt-injection firewall for AI coding agents: gives Claude Code, Codex and Cursor the few skills, MCP servers and tools e

Keep your sensitive credentials out of the agents you build and the coding agent you use. Test any agent with planted fake keys, or see whic

Open-source guardrails for AI agents powered by decision models like Jev; checks prompts, retrieved content, tool calls and responses for pr

Static security review for AI agent configs (LangGraph, CrewAI, OpenAI Agents, MCP): maps source-to-tool flows and flags untrusted input tha

BloodHound-style risk analysis for multi-agent AI architectures. Parses CrewAI, Dify, LangGraph, or generic YAML into a typed capability gra

Passive LLM Conversation Capture & Sensitive Data Exposure Research

Document extraction and validation for logistics companies.

Static security scanner for npm/PyPI packages, MCP servers, agent skills and repos. Runs locally, never runs the code, no LLM. CLI, Claude C

Pre-production checklists for solo founders. 4,685 items, 88% portable to any stack, 26 stack supplements — plus AI/agent security and the b

🛡️ Runtime guardrails for AI agents. Intercept and block unsafe tool calls caused by prompt injection.

Auto-permission engine for Antigravity CLI (agy): deterministic AST parser + LLM classifier

Stateless governance proxy for MCP (2026-07-28): policy, dry-run, human confirmation, audit, tracing

Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero te

Credential isolation for AI agents — stop leaking secrets to your agents. TAP is a credential proxy: agents never see secret values; optiona

Streaming privacy for LLM apps: pii-leak-benchmark (does your gateway leak PII in streams?), chunk-invariance (one-line test for split-bound

Open-source digital forensics and incident response for AI agents (Claude Code, Codex, Cursor, Gemini, Copilot…). One command: detect → coll

Agent Emergency Protocol Incident Codes: a vendor-neutral runtime incident-code language for autonomous AI agents. Created by Mitthan Meena.

Nephilex is an open-source AI Security Engineer that analyzes repositories, detects vulnerabilities, validates risks, explains findings, gen

Lightweight, agent-friendly AI security toolkit for Node.js & TypeScript. Check if your agent has loaded the skill, Stop prompt injection, a

FinSecAI: An experimental testbed for evaluating Prompt Injection, Jailbreak, and data extraction vulnerabilities in financial LLM agents vi

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

Open-source local MCP runtime that checks AI-agent tool calls, gates risky actions on approval, verifies results, and avoids blind retries a

Observe AI agent runs and control consequential actions. Signed policies, exact-action approvals, AuthZEN API vetoes and evidence. MCP gatew