Havuz

Inventario as-built y health check de servidores Windows en un solo .ps1

Local traffic visibility and privacy controls for coding agents. See what Claude Code, Codex and Copilot send to the model; mask secrets and

"ULTRASHIP" Claude Code plugin — 39 skills, 33 tools, 11 agents for ship-ready workflows: planning, review, pentesting, safety guardrails, c

Claude and ChatGPT now log into your app as your customers. OneHuman decides what they can see and do. Join our community: https://discord.g

Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.

Evidence-driven production readiness checklist for shipping web applications with confidence

The Rails audit skill for AI coding agents, ranked by blast radius. 🚂☢️

Local-first encrypted vault for API keys, tokens, SSH keys, database credentials, and developer configs. Nokuo 是一个本地优先的开发者密钥保险库，用于安全管

Soup Wall: open-source security for AI agents and model traffic. Local Agent, Gateway, self-hosted Console. Apache-2.0.

A sandbox service for running untrusted, agent-authored code that reports the isolation boundary each run executed behind. Lessons, no clone

Audit and fix your Mac's security in one command. No agent, no signup, open source.

Assume any role, any cloud. Short-lived AWS, Azure, and Google Cloud credentials for your tools.

Rhea.js: secure, convention-driven backend framework for Node.js and Express 5. TypeScript, security defaults, auth, CLI, plugin API.

PE/ELF x86/x64 CFG extractor

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

A modular, drop-in middleware collection for Laravel AI SDK agents. Offers middleware across security, observability, performance and guidan

Automated detection and tracking of fake engagement on GitHub — daily CI, zero infrastructure

Free client-side password and key generator for secure passwords, API keys, UUIDs, JWT secrets, and encryption keys. Powered by the Web Cryp

Laravel audit log & change history with real actor attribution (user / job / command / scheduler), cross-model change traces, time machine,

Zero-dependency TypeScript secret and PII redaction for any SDK, logs, HTTP, LLM prompts, and scoped MCP tool boundaries.

Per-entry-point, navigable call-graph visualizations of Solidity repositories — for Web3 security auditors.

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Pa

eBPF Prometheus exporter for AI-agent activity — per-agent tools, domains, ports, files, CPU & network — with a Grafana dashboard. A yeet se

Every live OMP session. One private page, in any modern browser.

Security-oriented three-axis observability for sandboxed AI agents: model intent, app context, and runtime telemetry into verifiable evidenc

Fast, zero-dependency access log analyzer, security threat inspector, and TUI dashboard for Caddy v2

A secure, production-ready Python CLI wrapper for Nmap that makes powerful scans easy and repeatable. Includes 12 built-in profiles (SYN, ag

Audits AUR PKGBUILD updates before you install: detects structural changes, suspicious commands, typosquatting, and novelty signals, then pr

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PH

Open-source AI-powered website audit CLI using the OpenAI API for SEO, UX, accessibility, performance, trust, and content analysis.

Tiny filesystem honeypot for macOS. Mounts fake secret files (.env, id_rsa, credentials.json) via WebDAV (no root) or NFS (root) — any acces

Automatic, model-driven permission review for OpenCode

One command. 29 battle-tested security checks built into every AI coding assistant you already use without leaving your IDE.

Lightweight open-core SIEM in Rust — S3-compatible for logs, Postgres for state.

Static-analysis-based dataset for training LLMs to detect, explain, and patch security vulnerabilities (Java, Korean/English annotations, ve

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

Open-source CPG-based interprocedural taint analysis + LLM triage, with a Ghidra-style audit workbench. Runs fully offline.

Feature-rich all-in-one self-hosted server & server fleet management (Web UI): patching, monitoring (agent + agentless/SNMP), CVE scanning,

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segreg

Terminal UI to manage SSH keys, edit ~/.ssh/config, and audit your SSH security. Encrypted metadata + backups, an A–F security grade, byte-i

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

Self-hosted personal AI agent with a WebUI, memory, tools, MCP, sub-agents and automations. Connect local or cloud LLMs.

Secure MCP access to local repositories — without shell, Git, or arbitrary writes.

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

Cache Commander — a TUI and MCP server to explore, audit, and clean developer cache directories. Scan for CVEs, find outdated packages, recl

Hermes Agent (NousResearch) sandboxed by NVIDIA OpenShell — hardware-enforced network/filesystem/syscall policy, full memory + gateway stack

Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations

🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compiler-backed facts for humans and AI.

Prompt-injection, jailbreak and secret-leak defense for DeepSeek Harness: Aho-Corasick detection with allow/ask/block interception and sanit

eBPF ransomware detection & response agent for Linux — single static binary, no kernel modules, behavioural scoring, process pause/kill