Havuz

A Mac vault that runs authenticated actions for AI agents over MCP. The agent gets the operation, never the key: no command reveals a stored

Lyrie.ai — The world's first autonomous AI cybersecurity agent. Built by OTT Cybersecurity LLC.

A daily vulnerability briefing for AI-agent-managed machines — deterministic matching against OSV + CISA KEV; the LLM only explains. MIT

MCP server that connects AI assistants to HackerOne for bug bounty hunting

Free local guardrail for AI coding agents: every tool_call judged on-device (regex + Laya), allow/review/block

Universal Zero-Refusal Agent Framework - 40+ jailbreak templates (T1-T119), 1128 curated skills, executable framework-core, installer untuk

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connector

🪼 Lagune AI is your security copilot as you build, your Blue Team when you audit, whether you're a developer or not (no API key needed).

Curated Microsoft Security skills for AI agents - Defender, Sentinel, Entra, Purview, Intune, Security Copilot

JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体，同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式，兼容 HaE 规则，支持登录态

Claude Code Monitor : Monitor & audit every action Claude Code takes on your computer.

Sandbox for AI coding agents (Claude Code, opencode, pi): runs each project in an isolated microVM with host-side secret injection. Linux/KV

Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.

An AI that administers Linux through typed, approval-gated, Ed25519-audited actions. The model selects the action; the daemon builds the com

3x more usage on your coding agent, same quality. Have an multi-agent setup in mind? Bello already supports it. Mix models, run agents in pa

Maintainer-governed agent for evidence-backed open-source contribution proposals

ToolReplay, AI agent’ların tool-call transcript’lerini determinism, yinelenen çağrılar ve izin kapsamı açısından denetleyen bir Python CLI’dir.

Neden yükseliyor · AI agent’ların davranışını denetlenebilir ve tekrarlanabilir kılma ihtiyacına doğrudan hitap ediyor; README’de örnek girdi ve çıktıyla çalışan bir kullanım gösteriliyor. 13 günde 184 yıldız dikkat çekiyor, ancak son 28 günde 2 commit ve 1 farklı yazar bakım ve benimsenmenin sürdürülebilirliği için henüz zayıf kanıt.

Build AI agents and LLM workflows visually. Security-maintained continuation of Flowise: security fixes, Apache-2.0 only, drop-in for your e

AgentGuard: Zero-Trust Security Foundation for AI Agents

Styx is where everything converges: every repo you work in, the AI coding agents building in them, and every login they need to ship. Switch

使用大模型时，隐藏你的密码、token 等敏感信息。适配市面上各种工具，一键安装即可用。 / Hide passwords, tokens and secrets from the model. Works with everyday tools — one-click inst

Your app is guilty until proven secure: an agent skill whose /hack-me breaks into your own running app, proves each bug with a real request,

AgentAegis is a lightweight plugin providing full-lifecycle runtime protection for OpenClaw.

A fast, keyboard-driven HTTP intercepting proxy and pentesting toolkit for the terminal built for humans and AI agents alike.

Alignment-research scaffold (autoresearch-style) for LLM guardrails: search over a single policy.md surface

Research into flattening compaction strategics

The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.

Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

Myrtia — agent-native red teaming for LLMs and AI agents: a deliberating council of attacker models (propose, cross-critique, Borda vote, ch

Cover your Mac's screen with a hotkey while AI agents keep running, even with the lid closed. The covered screen glows when Claude Code, Cod

Skills from StarSling (agent-native CI)

Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, improved every release.

Let your AI agent use your passwords and API keys - without ever letting it see them

All-in-one Docker/Podman image: hermes-agent + hermes-webui + hermes-dashboard in a single container

Sandbox for running AI coding agents autonomously: isolated, network-restricted, host-safe

Policy guardrails for coding agents (Claude Code, Codex, Cursor) — every tool call is checked locally, before it runs.

A code reviewer that reports only what it can prove: a test that shows the bug, or the data that confirms the risk. Open source, built by a

AI 辅助的授权渗透测试平台（基于 Ed1s0nZ/CyberStrikeAI 二次开发）：单/多智能体交战、本地近5年 CVE 语料与每日增量同步、GitHub-C2 交接、经验总结人审入库、HITL 审批与审计。

Auditable, token-gated DeepSeek Harness remote gateway: mobile QR access, per-device sessions, Host/Origin rewrite, settings/credentials/dir

A collection of public writeups on attacks against AI agents: prompt injection, tool abuse, memory poisoning, and data exfiltration.

Covert Coder — a local-first sovereign AI development environment for governed models, workflows, execution, evidence, and verification.

Find and redact secrets in AI coding agent histories (Claude Code, and more).

The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]

AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」（网安法·PIPL·等保2.0·数据出境·AI标识），并给出境内模型替代建议；可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源

Tamper-evident audit trails for AI agents: hash-chained Runtime Records, dependency-free, verifiable by anyone.