Havuz

CLI for auditing SSH host trust

Local-first security for developers and their AI coding agents. Finds risky agent settings (hooks, auto-approve, unpinned MCP servers), API

Finds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.

Automated SSH and server provisioning installer for Linux environments with secure configuration, key management, system hardening, and depl

Real-time network traffic analysis in your terminal.

Supply-chain attack scanner for the agent era. Triage in 30s with `npx patient-zero`, block malicious installs before postinstall runs, or d

A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity betwe

Scan a codebase for AI SDKs, MCP servers and agent tools; map risks to NIST AI RMF, ISO 42001, EU AI Act and the OWASP LLM and Agentic Top 1

An AI-powered Git pre-commit/pre-push security gate

Local vault for AI agents. Use API keys without exposing raw stored keys to the model.

Static security & correctness linter for Payload CMS. Zero-config, deterministic, ts-morph-based. Catches access-control gaps, unsafe Local

Read-only AWS CLI: readable listings, resources by name, relations between them, optional offline graph. Can only Describe/Get/List/Head — e

CLI for reducing accidental secret disclosure in LLM coding sessions

Defensive OSINT exposure checker: see what an email, password, domain or username leaks in public breach data. No API keys. CLI + local web

Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go

Local CLI for auditing AI agent skills, conflicts, duplicates, safety risks, and context cost across coding agents.

Terminal-native passive OSINT CLI for local-first public-source investigations, evidence correlation, and case management.

Convert Sigma detection rules to production-ready Wazuh XML. CLI tool with batch processing, ZIP input, field mapping, and config file suppo

Static secret scanner for source trees — regex rules, entropy scoring, and SARIF output for CI pipelines.

Lightweight TCP port scanner with banner grabbing, TLS certificate inspection, and service fingerprinting.

SSH and HTTP honeypot with structured logging and IP-level attack correlation.

PCAP analyzer that detects beaconing, DNS tunneling, and DGA-like patterns in network captures.

🔐 本地密钥库：管理 API Key / Token，AES-256-GCM 加密存本机，工具凭别名取用，agent 不接触明文。 / Local-first secret manager for AI workflows — agents get aliases, never

Lightweight Python recon toolkit — subdomain discovery, HTTP fingerprinting, and JSON reporting.

Static file analyzer for malware triage — hashing, binary headers, entropy, signature rules, and IOC matching.