Havuz

Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.

3x more usage on your coding agent, same quality. Have an multi-agent setup in mind? Bello already supports it. Mix models, run agents in pa

A fence keeps things out, but also in. This project is still in early, and active development.

Build AI agents and LLM workflows visually. Security-maintained continuation of Flowise: security fixes, Apache-2.0 only, drop-in for your e

Styx is where everything converges: every repo you work in, the AI coding agents building in them, and every login they need to ship. Switch

Maintainer-governed agent for evidence-backed open-source contribution proposals

ToolReplay, AI agent’ların tool-call transcript’lerini determinism, yinelenen çağrılar ve izin kapsamı açısından denetleyen bir Python CLI’dir.

Neden yükseliyor · AI agent’ların davranışını denetlenebilir ve tekrarlanabilir kılma ihtiyacına doğrudan hitap ediyor; README’de örnek girdi ve çıktıyla çalışan bir kullanım gösteriliyor. 13 günde 184 yıldız dikkat çekiyor, ancak son 28 günde 2 commit ve 1 farklı yazar bakım ve benimsenmenin sürdürülebilirliği için henüz zayıf kanıt.

Self-hosted multi-engine Sigma detection for event logs

Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, san

Count Patchula vants to update your deps. A modern dependency updater with strong defaults.

Run Windows and Linux programs on Windows, Linux and Android. A user-mode NT and Linux kernel emulator with WHP/KVM acceleration.

Self-hosted pentest engagement management and report.

A fast, keyboard-driven HTTP intercepting proxy and pentesting toolkit for the terminal built for humans and AI agents alike.

Alignment-research scaffold (autoresearch-style) for LLM guardrails: search over a single policy.md surface

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed,

Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerabili

Local-first privacy toolkit. Map yourself against 400+ data brokers, send CCPA/GDPR deletion mail, and check password dumps. The vault never

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

A codebase scanner that helps you not run malicous code

Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.

Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

Cover your Mac's screen with a hotkey while AI agents keep running, even with the lid closed. The covered screen glows when Claude Code, Cod

Agent skills from StarSling

Orb44 Watch satellite - inside pulse from your VPS (load, listeners, hardening).

Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, improved every release.

macOS companion toolkit for power users

Let your AI agent use your passwords and API keys - without ever letting it see them

All-in-one Docker/Podman image: hermes-agent + hermes-webui + hermes-dashboard in a single container

Sandbox for running AI coding agents autonomously: isolated, network-restricted, host-safe

A Python CLI tool that scans all repositories owned by a GitHub user/org for accidentally committed secrets (API keys, tokens, passwords, pr

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

Auditable, token-gated DeepSeek Harness remote gateway: mobile QR access, per-device sessions, Host/Origin rewrite, settings/credentials/dir

密管（MiGuan）：本地优先的密码管理器，提供离线 HTML 应用和 Python CLI

Covert Coder — a local-first sovereign AI development environment for governed models, workflows, execution, evidence, and verification.

Free, open-source tool to build a NIST CSF 2.0 Current Profile and gap analysis from an organization's documents (AI-assisted, human-validat

Find and redact secrets in AI coding agent histories (Claude Code, and more).

AI-powered multi-agent security auditor for Symfony applications, provider-agnostic via symfony/ai.

Make AI-written code production-ready, with proof. Agent skill for Claude Code, Codex, GitHub Copilot & Gemini CLI: locks behavior, finds bu

Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed exposed.

The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]

A distributed OpenTelemetry-native columnar datastore whose only backend is object storage.

Predict the silent integration traps an AI agent would ship (zero-revenue configs, auth bypasses, immutable wrong choices) — then enforce, i

Free, MIT-licensed MCP security testing from ClearFrame. Scan, audit, compare, and review locally; continue in the ClearFrame CLI or Mac app

Run Claude Code, Codex and other coding agents in a local VM on a clone of your project, then review their changes like a pull request. Mac

Remove metadata from photos, PDFs, Office documents, audio and video. Strips EXIF, GPS location, camera serial numbers, author names and tim

DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.

Distributed, centrally-controlled Web Application Firewall built on pingap & Cloudflare Pingora. Semantic attack detection, Cloudflare-style

One-click sandboxes for AI agents, with egress policy, MCPs, skills and audit. Built on NVIDIA OpenShell.

Lab-RATS is an open-source, lightweight Android Remote Administration framework packed with powerful monitoring and interaction capabilities