Havuz

Open-source AI-powered website audit CLI using the OpenAI API for SEO, UX, accessibility, performance, trust, and content analysis.

Automatic, model-driven permission review for OpenCode

One command. 29 battle-tested security checks built into every AI coding assistant you already use without leaving your IDE.

Terminal UI to manage SSH keys, edit ~/.ssh/config, and audit your SSH security. Encrypted metadata + backups, an A–F security grade, byte-i

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

Cache Commander — a TUI and MCP server to explore, audit, and clean developer cache directories. Scan for CVEs, find outdated packages, recl

Post-quantum age key generation and paper backup tool with QR codes

Find what's using a port, who started it (Claude Code, Cursor, Docker…), whether your network can reach it, and stop it safely. An lsof alte

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

Secrets management for AI agents: approve API keys and credentials on your phone with biometrics, delivered end-to-end encrypted into the ta

Paste a redacted copy of your clipboard with one hotkey. Hides API keys, tokens, passwords and PII (900+ patterns) before they reach AI chat

Skill router and prompt-injection firewall for AI coding agents: gives Claude Code, Codex and Cursor the few skills, MCP servers and tools e

CI-friendly CLI and API that fails builds when deployed URLs are missing or misconfigure HTTP security headers (HSTS, CSP, COOP, cookies...)

Safely run untrusted repos (fake-interview malware, infostealers, RATs) in a locked-down, ephemeral container. No host secrets reachable, ne

The AI security agent guards your code.

Your AI agent needs your API keys. It doesn't need to see them. tokenstash writes keys straight into .env.local for Claude Code, Codex, Curs

Security-hardened openclaw with auth gateway, AES-256 encryption and session management

Docker sandbox for the Claude Code CLI. Runs Claude against one project folder — including with --dangerously-skip-permissions — while your

Git-aware secret & .env leak guard for TypeScript/Node — sub-second pre-commit scanning with the lowest false-positive rate.

Run a command in a sandbox with the same flags on every OS — one capability model compiled to Seatbelt (macOS), gVisor (Linux), and AppConta

🔐 The local-only AI secret manager for the AI-coding era with MCP, CLI, Web UI, TUI, Chrome Extension and Mobile App. No cloud, No telemetry

Guardrails for AI coding agents — block catastrophic tool calls before they run. Semantic, agent-neutral, near-zero false positives.

🔎 Fast, local search across the CS research literature, with an expressive query language, an interactive TUI, and scriptable output.

An AI chat agent (harness) with integrated tools, skills and an optional knowledge base. Chat with any OpenAI-compatible LLM, use built-in i

Local-first Python CLI for safer log sharing: redact secrets, tokens, emails, and local paths before posting to GitHub issues, tickets, or A

Your SvelteKit app's code health, checked before it ships. Statically, no browser — SEO, Performance, Correctness, Security, Architecture, A

No WiFi? Now WiFi. One command. 27 techniques. Bypass any captive portal.

🔐 The password manager for terminal users and AI agents. Age-encrypted, keyring-cached, MCP-ready. Zero telemetry.

end to end encrypted secret sync for developer teams. encrypt locally; the server only ever stores ciphertext.

Automated CLI security auditor for web configuration vulnerabilities.

Passive blue-team security scanner — 582 read-only modules, plus 32 opt-in probes. Runs on your machine. No accounts. No telemetry.

Fast, zero-dependency redaction of secrets & PII from text and logs — in pure Rust.

Open-source, self-hosted AI agent for terminal, Telegram and Raspberry Pi. Local Ollama or Claude/Codex workers, enforced by a deterministic

Operate Splunk Enterprise and Splunk SOAR as code with a safety-first CLI and MCP server for humans and AI agents.

🔒 Jail OpenCode, Claude Code, Copilot CLI and OmO in micro-VMs: only your project folders, only the networks you allow.

a secret store for ai agents with one rule: the agent never sees the plaintext. get a secret once into the os keychain, then inject it into

A police department for your Claude Code agents — a logging-only hook + CLI that audits the main agent and every subagent and reports rule o

Keyed reversible source code obfuscator for Rust: syntactically valid, functionally identical, spiritually hostile.

Local AI security reviews with evidence, severity, and a review UI.

OSS license watchdog. Monitors GitHub repos you depend on and alerts you when a license changes, explaining exactly what you can no longer d

Passive attack-surface scanner: turn a domain into a risk grade, copy-paste fixes, and a client-ready report. Safe DNS, HTTP, TLS, email, an

Semantic shell command safety classifier — AST-based risk scoring for AI coding agents

easybackend.js is a developer-friendly backend DSL and framework for building Node.js/Express APIs with validation, auth, database, and secu

Think first, then code. Where Claude Code and Codex jump straight to writing, this stays review-first: a code reviewer, security scanner, ro

Open-source Supabase security auditor: detects RLS-disabled tables, public buckets, exposed SECURITY DEFINER functions. Active anonymous pro

Local, deterministic review of Git changes: weakened tests and CI gates, security boundaries, blast radius. CLI, GitHub Action, MCP server,

Encrypted peer to peer secret manager. Sync .env secret between dev machines - your secrets never touch a server in readable form.

Security gate for AI-generated code - blocks the build until vulnerabilities are fixed

AI agent skills for the JFrog Platform. Search and download artifacts, query CVEs and exposures, check curation and compliance, trace builds