Havuz

nas: a zero-dependency Python CLI + MCP server for Synology DSM 7. One-command audit and fix for the C3RB3R / .L0CK3D ransomware campaign; h

Fast, self-contained vulnerability scanner (single Go binary) for web apps, APKs and binaries - extensible with JSON and nuclei YAML templat

Local, evidence-based application security assessment engine and Claude Code plugin

Heuristic Solidity/DeFi security review toolkit — flags suspicious patterns to review, backed by Foundry scenarios. Educational / authorized

Catch .env secrets leaking into git: a pre-commit hook and CLI that fails when an API key or any value of your env files is staged, tracked

给 AI 生成代码做安全审阅的终端工具：410 条漏洞清单，20 条本地规则 + 模型逐条判定（带证据核实），看完 diff 再决定要不要写（Rust）

Self-hosted pentest engagement management and report.

WireGuard, AmneziaWG, Cisco AnyConnect and Tailscale in one native, free and open-source macOS VPN client: SwiftUI app, Network Extension, k

Count Patchula vants to update your deps. A modern dependency updater with strong defaults.

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

CI-friendly CLI and API that fails builds when deployed URLs are missing or misconfigure HTTP security headers (HSTS, CSP, COOP, cookies...)

HTTPS overlay for operators. macOS and Android clients. Secure admin session that holds through short disconnects and packet loss. Protocol

密管（MiGuan）：本地优先的密码管理器，提供离线 HTML 应用和 Python CLI

Make AI-written code production-ready, with proof. Agent skill for Claude Code, Codex, GitHub Copilot & Gemini CLI: locks behavior, finds bu

Lab-RATS is an open-source, lightweight Android Remote Administration framework packed with powerful monitoring and interaction capabilities

Rhea.js: secure, convention-driven backend framework for Node.js and Express 5. TypeScript, security defaults, auth, CLI, plugin API.

Styx is where everything converges: every repo you work in, the AI coding agents building in them, and every login they need to ship. Switch

Run Claude Code, Codex and other coding agents in a local VM on a clone of your project, then review their changes like a pull request. Mac

Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Cod

Catch risky npm dependency changes before they merge.

CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架

One-click sandboxes for AI agents, with egress policy, MCPs, skills and audit. Built on NVIDIA OpenShell.

Evidence-driven Java security review workbench

eBPF Prometheus exporter for AI-agent activity — per-agent tools, domains, ports, files, CPU & network — with a Grafana dashboard. A yeet se

GitHub Actions workflow’larında kullanılan JavaScript action’ların kaynak kodundan `dist/` çıktısını yeniden oluşturup commit edilmiş dosyalarla karşılaştırır.

Neden yükseliyor · Repo yalnızca 1 günlük ve 30 yıldızlı; son 28 günlük commit ve farklı yazar verisi ölçülmediği için yükseliş eğilimi doğrulanamıyor. README’nin işaret ettiği supply-chain riski ve belirli bir denetim boşluğunu hedeflemesi ilgi çekmiş olabilir, ancak bu ilginin nedeni veya kullanıcı benimsemesi mevcut verilerle kanıtlanmış değil.

Self-hosted multi-engine Sigma detection for event logs

Distributed, centrally-controlled Web Application Firewall built on pingap & Cloudflare Pingora. Semantic attack detection, Cloudflare-style

Build AI agents and LLM workflows visually. Security-maintained continuation of Flowise: security fixes, Apache-2.0 only, drop-in for your e

Claude and ChatGPT now log into your app as your customers. OneHuman decides what they can see and do. Join our community: https://discord.g

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

Coding-agent tools on TypeSafe's Jev, measured in public. review-router: caught 13 of 13 CVE fixes a filename rule sent to a quick review. j

Defensive OSINT exposure checker: see what an email, password, domain or username leaks in public breach data. No API keys. CLI + local web

A codebase scanner that helps you not run malicous code

Grepleaks — your AI pentest environment. An AI pentest agent that lives in your terminal.

Secrets management for AI agents: approve API keys and credentials on your phone with biometrics, delivered end-to-end encrypted into the ta

ThreatIntel-Aggregator, güvenlik feed’lerini birleştirip tehditleri analiz eden ve varlıklarla ilişkilendiren self-hosted bir threat intelligence platformudur.

Neden yükseliyor · 14 günde 54 yıldız almış; bu, yeni bir repo için dikkat çekici bir başlangıç. Ancak yalnızca 3 commit ve 2 farklı yazar bilgisi var; yükselişin nedenini veya kullanıcı benimsemesini gösteren bağımsız kanıt mevcut değil.

ToolReplay, AI agent’ların tool-call transcript’lerini determinism, yinelenen çağrılar ve izin kapsamı açısından denetleyen bir Python CLI’dir.

Neden yükseliyor · AI agent’ların davranışını denetlenebilir ve tekrarlanabilir kılma ihtiyacına doğrudan hitap ediyor; README’de örnek girdi ve çıktıyla çalışan bir kullanım gösteriliyor. 13 günde 184 yıldız dikkat çekiyor, ancak son 28 günde 2 commit ve 1 farklı yazar bakım ve benimsenmenin sürdürülebilirliği için henüz zayıf kanıt.

Local-first privacy toolkit. Map yourself against 400+ data brokers, send CCPA/GDPR deletion mail, and check password dumps. The vault never

Passive Bluetooth neighbourhood monitor for Raspberry Pi and Linux: a live radar, device triage, categories and alerts for new devices.

Assume any role, any cloud. Short-lived AWS, Azure, and Google Cloud credentials for your tools.

A sandbox service for running untrusted, agent-authored code that reports the isolation boundary each run executed behind. Lessons, no clone

Orb44 Watch satellite - inside pulse from your VPS (load, listeners, hardening).

Soup Wall: open-source security for AI agents and model traffic. Local Agent, Gateway, self-hosted Console. Apache-2.0.

Read-only Telegram MCP server. Search chats, read messages, and download attachments from any MCP client.

Evidence-grounded cryptographic inventory and post-quantum migration planning for software repositories. Local static analysis, zero mandato

Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed exposed.

Safely run untrusted repos (fake-interview malware, infostealers, RATs) in a locked-down, ephemeral container. No host secrets reachable, ne

Inventario as-built y health check de servidores Windows en un solo .ps1

A secure, production-ready Python CLI wrapper for Nmap that makes powerful scans easy and repeatable. Includes 12 built-in profiles (SYN, ag