Havuz

REA, coding agents aracılığıyla uygulamaları ve native binary'leri inceleyip bulguları yapılandırılmış kanıtlarla sunan bir reverse-engineering aracıdır.

Neden yükseliyor · Agent'ları reverse-engineering araçlarına bağlayan bütünleşik bir CLI/MCP iş akışı sunması ilgi çekiyor olabilir. 174 günde 2392 yıldız ve son 28 günde 108 commit kayda değer ilgi ve aktivite gösteriyor; ancak yalnızca 2 farklı yazar olması geliştirme faaliyetinin dar bir grupta toplandığını düşündürüyor.

AI-Powered Web Security & Automation - Official bonus skills, agents & MCP configs for the 'Agentic Hacking' ebook (28 SKILL.md templates)

OneCLI, ekiplerin çalışan başına sandbox içinde çalışan AI agent’ları merkezi politika ve credential kontrolüyle yönetmesini sağlayan açık kaynak bir platformdur.

Neden yükseliyor · Ekiplerin agent’ları gerçek sistemlere bağlama ihtiyacına, sandbox ve merkezi credential/policy yönetimini bir araya getiren bir ürünle yanıt veriyor. 203 günde 3.517 yıldız dikkat çekici ilgi gösteriyor; ancak ilginin hangi kanaldan geldiği veya benimsenmenin ne ölçüde üretim kullanımına dönüştüğü verilen verilerden anlaşılmıyor. Son 28 gündeki 12 commit ve 4 farklı yazar, projenin aktif geliştirildiğine dair sınırlı ama olumlu kanıt.

Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with defau

nas: a zero-dependency Python CLI + MCP server for Synology DSM 7. One-command audit and fix for the C3RB3R / .L0CK3D ransomware campaign; h

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK,

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay y

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs an

NPMscan MCP Plugin

OpenLoomi is an open-source AI coworker. It connects your work tools, understands what you’re working on, and tells you what needs your atte

Open-source antivirus and firewall for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugi

Local, evidence-based application security assessment engine and Claude Code plugin

Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential con

86-tool OSINT MCP server with private evidence graphs, image analysis, reverse search, and person dossiers.

Store, share, and resume AI coding sessions.

Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call un

Mantis Hack

Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open

The black box for AI-written code. Passive decision graph linking every commit to the agent prompts behind it: drift detection, DLP audit of

Let AI agents investigate and operate infrastructure through declared actions, bounded by policy and host-side checks. Approvals when requir

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware tabl

Personal AI assistant for work inside corporate constraints, built on coding agents and the tools, sessions, and permissions you already hav

AgentSkillsHub (agentskillshub.top) — security-graded directory of open-source Claude skills, MCP servers & AI agent tools, refreshed every

Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.

Agent Canary 3.0: open-source MCP, SDK, and CLI security toolkit with a guarded execution gateway, decoy signals, local tests, and public ac

Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they exe

A Mac vault that runs authenticated actions for AI agents over MCP. The agent gets the operation, never the key: no command reveals a stored

MCP server that connects AI assistants to HackerOne for bug bounty hunting

Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connector

JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态

An AI that administers Linux through typed, approval-gated, Ed25519-audited actions. The model selects the action; the daemon builds the com

A fast, keyboard-driven HTTP intercepting proxy and pentesting toolkit for the terminal built for humans and AI agents alike.

The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, improved every release.

A collection of public writeups on attacks against AI agents: prompt injection, tool abuse, memory poisoning, and data exfiltration.

AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」（网安法·PIPL·等保2.0·数据出境·AI标识），并给出境内模型替代建议；可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源

Tamper-evident audit trails for AI agents: hash-chained Runtime Records, dependency-free, verifiable by anyone.

OAuth 2.1 Authorization Server for the Model Context Protocol (MCP)

"ULTRASHIP" Claude Code plugin — 39 skills, 33 tools, 11 agents for ship-ready workflows: planning, review, pentesting, safety guardrails, c

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS

Free, MIT-licensed MCP security testing from ClearFrame. Scan, audit, compare, and review locally; continue in the ClearFrame CLI or Mac app

Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. Bui

One-click sandboxes for AI agents, with egress policy, MCPs, skills and audit. Built on NVIDIA OpenShell.

MCP server for CVE intelligence: 16 read-only tools for CVE records, CISA KEV, EPSS history, exploits, fix guidance as sources state it, ver

Soup Wall: open-source security for AI agents and model traffic. Local Agent, Gateway, self-hosted Console. Apache-2.0.

A sandbox service for running untrusted, agent-authored code that reports the isolation boundary each run executed behind. Lessons, no clone

Free, open-source SSH client, SFTP, tunnels, database GUI and a secure AI-agent (MCP) bridge in one app a MobaXterm, PuTTY and Termius al