Havuz

Store, share, and resume AI coding sessions.

Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call un

Skill para Claude, Codex, Cursor e outros agentes: check pré-lançamento do seu app com 20 checagens de segurança + 10 de prontidão (Lovable,

Open Source Agentic Security Scanner

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own mo

Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open

The black box for AI-written code. Passive decision graph linking every commit to the agent prompts behind it: drift detection, DLP audit of

Copy 2FA codes on your Mac with one shortcut: verification codes from Mail and Messages plus a built-in TOTP/HOTP authenticator. Free, open

A free and open-source database management tool, suitable for team use. It offers capabilities such as access control, data anonymization, S

Mantis Hack

Coverage, security and code quality for coding agents

给 AI 生成代码做安全审阅的终端工具：410 条漏洞清单，20 条本地规则 + 模型逐条判定（带证据核实），看完 diff 再决定要不要写（Rust）

A daily vulnerability briefing for AI-agent-managed machines — deterministic matching against OSV + CISA KEV; the LLM only explains. MIT

Evidence-driven Java security review workbench

Personal AI assistant for work inside corporate constraints, built on coding agents and the tools, sessions, and permissions you already hav

CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架

Lightweight, stateless privacy gateway for LLM APIs — redact secrets before OpenAI/Anthropic upstreams and restore them transparently in SSE

Discover and compare open-source Agent Skills, tools & MCP servers — with quality scoring, trending analysis, and automated GitHub sync

A fetch wrapper that drops your custom auth headers when a redirect crosses to another origin.

Let AI agents investigate and operate infrastructure through declared actions, bounded by policy and host-side checks. Approvals when requir

GitHub Actions workflow’larında kullanılan JavaScript action’ların kaynak kodundan `dist/` çıktısını yeniden oluşturup commit edilmiş dosyalarla karşılaştırır.

Neden yükseliyor · Repo yalnızca 1 günlük ve 30 yıldızlı; son 28 günlük commit ve farklı yazar verisi ölçülmediği için yükseliş eğilimi doğrulanamıyor. README’nin işaret ettiği supply-chain riski ve belirli bir denetim boşluğunu hedeflemesi ilgi çekmiş olabilir, ancak bu ilginin nedeni veya kullanıcı benimsemesi mevcut verilerle kanıtlanmış değil.

Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.

Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they exe

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

Catch .env secrets leaking into git: a pre-commit hook and CLI that fails when an API key or any value of your env files is staged, tracked

Secure WebView for React Native auth, checkout, OAuth, and other controlled web flows.

Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây

A Mac vault that runs authenticated actions for AI agents over MCP. The agent gets the operation, never the key: no command reveals a stored

Open Source Safe Roblox Account Manager 2026 Secure Clean Alt Manager

LAN Sheriff watches which servers your network talks to. Self-hosted, no account. Observes only; blocks nothing. Built by 291 Group.

Govern: one Decionis verdict before a workflow step runs — a deploy, a migration, an infrastructure change, an agent's action — with a signe

Free local guardrail for AI coding agents: every tool_call judged on-device (regex + Laya), allow/review/block

A Jellyfin plugin that adds native two-factor authentication (TOTP, email OTP) with trusted device tokens, TV device pairing, LAN bypass, an

AI 自主渗透测试 · 红队作战平台 | 多 Agent 自主推进 · 漏洞情报运营 · 后渗透与 C2 | LLM 三通道轮询 | 全程证据留痕 | 原百度攻防赛冠军项目独立演进版

Lyrie.ai — The world's first autonomous AI cybersecurity agent. Built by OTT Cybersecurity LLC.

Self-hosted bug-bounty platform — verification-first recon & DAST, continuous monitoring. Your data stays on your machine.

MCP server that connects AI assistants to HackerOne for bug bounty hunting

Published: 2026-10-18

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free

Agent Canary 3.0: open-source MCP, SDK, and CLI security toolkit with a guarded execution gateway, decoy signals, local tests, and public ac

A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact c

Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 cat

Passive Bluetooth neighbourhood monitor for Raspberry Pi and Linux: a live radar, device triage, categories and alerts for new devices.

Universal Zero-Refusal Agent Framework - 40+ jailbreak templates (T1-T119), 1128 curated skills, executable framework-core, installer untuk

A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum au

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.

json-guard, JSON metnini JSON.parse öncesinde tarayarak boyut, iç içe geçme, anahtar ve string uzunluğu sınırları uygulayan bir TypeScript kütüphanesidir.

Neden yükseliyor · JSON kaynaklı hizmet engelleme riskini somut bir demo ve ölçümle anlatması dikkat çekmiş olabilir. Ancak 3 günlük yaş, 77 yıldız, 2 commit ve 1 farklı yazar verisi erken ilgiyi gösterir; benimsenme veya olgunluk kanıtı değildir.

Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connector

Production CI/CD pipeline template with quality gates, container security, SLSA provenance, cosign signing, and automated release management