Havuz

Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish

Agent skill for binary exploitation and CTF pwn — stack, heap, format string, kernel, seccomp bypass.

Threat modeling for AI coding agents: point Claude Code, Codex or any agent at your repo and get an evidence-traced threat model. 36 archite

Mantis, AI coding agents ile kod tabanlarındaki güvenlik açıklarını araştırma, yeniden üretme ve düzeltme iş akışları kurmaya yönelik modüler bir toolkit ve referans harness sunuyor.

Neden yükseliyor · AI agent’lar ile güvenlik açığı bulma ve düzeltme ilgisinin artması projeye görünürlük kazandırmış olabilir; ancak yalnızca verilen ölçümlerden yükselişin nedenini doğrulamak mümkün değil. 104 günlük yaşında 1717 yıldız dikkat çekici ilgi gösterse de son 28 gündeki 5 commit ve 1 farklı yazar, güncel geliştirme hareketliliğinin sınırlı olduğuna işaret ediyor.

Autonomous agentic network penetration-testing tool (authorized use only)

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with defau

Blitz Strike, penetration-testing iş akışını MCP üzerinden sunan ve bulguları canlı doğrulamaya yönelen bir güvenlik aracıdır.

Neden yükseliyor · 15 günlük yaşına rağmen 512 yıldız almış; MCP tabanlı agent iş akışlarıyla penetration testing'i tek entegrasyonda toplama vaadi dikkat çekiyor. Ancak son 28 günde yalnızca 2 commit ve 1 farklı yazar görünmesi, bu ilginin aktif geliştirme veya topluluk katkısıyla henüz desteklenmediğini gösteriyor.

Maskit, AI araçlarına giden isteklerde hassas verileri yerel olarak maskeleyip yanıtlarda geri eşleştirmeyi sağlayan bir gizlilik proxy’sidir.

Neden yükseliyor · LLM araçlarına hassas veri gönderme kaygısına doğrudan yanıt veriyor ve farklı Base URL yapılandırabilen istemcilere yerel proxy ile bağlanmayı vadediyor. 18 günde 279 yıldız ve son 28 günde 96 commit dikkat çekici; ancak katkı 3 yazarda yoğunlaşıyor ve bu veriler ürünün güvenilirliğini ya da benimsenmesini tek başına kanıtlamıyor.

SOC, incident response and SecOps for Linux servers in one agent: learns each host, watches it with zero-token sensors, triages with a small

OpenLoomi is an open-source AI coworker. It connects your work tools, understands what you’re working on, and tells you what needs your atte

Free Course : Data, Machine Learning, Deep Learning and AI Engineering, the long way round: the math, the code, the systems and the security

AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/a

Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential con

AI 自主渗透测试 · 红队作战平台 | 多 Agent 自主推进 · 漏洞情报运营 · 后渗透与 C2 | LLM 三通道轮询 | 全程证据留痕 | 原百度攻防赛冠军项目独立演进版

Open Source Agentic Security Scanner

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own mo

The black box for AI-written code. Passive decision graph linking every commit to the agent prompts behind it: drift detection, DLP audit of

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware tabl

Lightweight, stateless privacy gateway for LLM APIs — redact secrets before OpenAI/Anthropic upstreams and restore them transparently in SSE

Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they exe

Lyrie.ai — The world's first autonomous AI cybersecurity agent. Built by OTT Cybersecurity LLC.

给 AI 生成代码做安全审阅的终端工具：410 条漏洞清单，20 条本地规则 + 模型逐条判定（带证据核实），看完 diff 再决定要不要写（Rust）

Universal Zero-Refusal Agent Framework - 40+ jailbreak templates (T1-T119), 1128 curated skills, executable framework-core, installer untuk

🪼 Lagune AI is your security copilot as you build, your Blue Team when you audit, whether you're a developer or not (no API key needed).

An AI that administers Linux through typed, approval-gated, Ed25519-audited actions. The model selects the action; the daemon builds the com

3x more usage on your coding agent, same quality. Have an multi-agent setup in mind? Bello already supports it. Mix models, run agents in pa

Maintainer-governed agent for evidence-backed open-source contribution proposals

Build AI agents and LLM workflows visually. Security-maintained continuation of Flowise: security fixes, Apache-2.0 only, drop-in for your e

AgentGuard: Zero-Trust Security Foundation for AI Agents

AgentAegis is a lightweight plugin providing full-lifecycle runtime protection for OpenClaw.

Your app is guilty until proven secure: an agent skill whose /hack-me breaks into your own running app, proves each bug with a real request,

Alignment-research scaffold (autoresearch-style) for LLM guardrails: search over a single policy.md surface

The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit

Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.

Myrtia — agent-native red teaming for LLMs and AI agents: a deliberating council of attacker models (propose, cross-critique, Borda vote, ch

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

Policy guardrails for coding agents (Claude Code, Codex, Cursor) — every tool call is checked locally, before it runs.

A code reviewer that reports only what it can prove: a test that shows the bug, or the data that confirms the risk. Open source, built by a

Auditable, token-gated DeepSeek Harness remote gateway: mobile QR access, per-device sessions, Host/Origin rewrite, settings/credentials/dir

A collection of public writeups on attacks against AI agents: prompt injection, tool abuse, memory poisoning, and data exfiltration.

Covert Coder — a local-first sovereign AI development environment for governed models, workflows, execution, evidence, and verification.

The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]

Find and redact secrets in AI coding agent histories (Claude Code, and more).

Tamper-evident audit trails for AI agents: hash-chained Runtime Records, dependency-free, verifiable by anyone.

The AI-friendly C23 compiler for security research, built on LLVM [WIP]

Run Claude Code, Codex and other coding agents in a local VM on a clone of your project, then review their changes like a pull request. Mac

Local traffic visibility and privacy controls for coding agents. See what Claude Code, Codex and Copilot send to the model; mask secrets and

对Artex的二次开发

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

Zero-dependency TypeScript secret and PII redaction for any SDK, logs, HTTP, LLM prompts, and scoped MCP tool boundaries.