Havuz

AVault - Call Recorder (No Root Required) | Privacy-first, hardware-encrypted audio vault for Android 12-16+. Rootless call recording via Sh

LordOS — a free, fast and secure GNU/Linux distribution based on Debian, with its own desktop environment: display server and Wayland compos

An AI that administers Linux through typed, approval-gated, Ed25519-audited actions. The model selects the action; the daemon builds the com

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

3x more usage on your coding agent, same quality. Have an multi-agent setup in mind? Bello already supports it. Mix models, run agents in pa

Universal Zero-Refusal Agent Framework - 40+ jailbreak templates (T1-T119), 1128 curated skills, executable framework-core, installer untuk

World's first Face Authentication enabled MacOS App-locker, completely free and open-source. Unlock your Mac apps using Face , TouchID or pa

Safety-first Windows PowerShell debloater for Brave Browser using enterprise policies, dry-run mode, backups, and restore.

Agent-assisted maintainership and development framework for Apache projects — Triage, Mentoring, Drafting (agent-authored fixes with human r

Cover your Mac's screen with a hotkey while AI agents keep running, even with the lid closed. The covered screen glows when Claude Code, Cod

Open-Source alternative app store for Android aimed to provide a secure Google Play alternative, offering verified, open-source apps with bu

Encrypts folders and files on Linux Mint (Cinnamon/Nemo) using AES-256, making it feel like a native part of the system: double-click on the

Open-source, self-hosted security pipeline for IT, AI and OT. Logs in. Evidence out.: OCSF normalization, 46 detection rules (MITRE/ATLAS/IC

OpenLock — a free, open-source App Lock for Android. Lock any app behind a PIN, pattern, or fingerprint, with Device-Admin uninstall protect

Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 cat

面向 CTF 竞赛评测平台（TSec Benchmark）的自动化 Web/逻辑漏洞挖掘与利用 Agent：分层调度 + 多会话并发 + 跨会话共享黑板 + 平台权威校验

The self-hosted token, certificate, license, and secret expiration manager with automated Certificate Lifecycle Management (CertOps) for tea

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

Automatic, model-driven permission review for OpenCode

Personal AI assistant for work inside corporate constraints, built on coding agents and the tools, sessions, and permissions you already hav

Lightweight open-core SIEM in Rust — S3-compatible for logs, Postgres for state.

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

Black-box web penetration testing automation framework for AI Agents

Open-source AI security tool to scan and fix vulnerabilities in your vibe-coded projects before you ship. AXguard by AwareXone.

Open-source macOS security app with local Endpoint Security monitoring, YARA scanning, behavioral detection, Email Guard, and network filter

A daily vulnerability briefing for AI-agent-managed machines — deterministic matching against OSV + CISA KEV; the LLM only explains. MIT

Copy 2FA codes on your Mac with one shortcut: verification codes from Mail and Messages plus a built-in TOTP/HOTP authenticator. Free, open

Automated detection and tracking of fake engagement on GitHub — daily CI, zero infrastructure

Open-source AI-powered website audit CLI using the OpenAI API for SEO, UX, accessibility, performance, trust, and content analysis.

Agent skill for producing threat models for open-source projects

Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys

Evidence-driven production readiness checklist for shipping web applications with confidence

A secure, production-ready Python CLI wrapper for Nmap that makes powerful scans easy and repeatable. Includes 12 built-in profiles (SYN, ag

Bounded repository context and verified patches for Codex and Claude Code. Explicit edit grants, source fingerprints, isolated worktrees, ac

High-performance Rust-based DNS-over-TLS (DoT) server with advanced ad-blocking for Android via Termux.

Store, share, and resume AI coding sessions.

Maintainer-governed agent for evidence-backed open-source contribution proposals

Compartment is a self-hosted deployment system for small software on infrastructure your team controls.

Hardening Linux automatisé avec Ansible — conformité ANSSI BP-028 (niveaux M/I/R/E). Durcissement système, réseau, SSH, utilisateurs + audit

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segreg

Modular post-install setup script for Fedora Linux (KDE)

Cryptographic trust and authorization evidence for AI agents. Every action a receipt, every grant a proof.

DropLink is a decentralized, temporary peer-to-peer sharing platform. Files, folders, links, and chat messages move directly between browser

Privacy-first SOS application for sending emergency messages and real-time location updates to trusted contacts.

OSS license watchdog. Monitors GitHub repos you depend on and alerts you when a license changes, explaining exactly what you can no longer d

Security gate for AI-generated code - blocks the build until vulnerabilities are fixed

Donate your spare AI usage for Open Source security

CryptoSafe | AES-256-GCM + Argon2 ID — Encrypt text securely, completely offline. No internet. No tracking. Open source.

easybackend.js is a developer-friendly backend DSL and framework for building Node.js/Express APIs with validation, auth, database, and secu

Open-source Supabase security auditor: detects RLS-disabled tables, public buckets, exposed SECURITY DEFINER functions. Active anonymous pro