Havuz

Mantis Hack

DeepSec — AI Security Offense & Defense Platform. Shield audits AI-generated code for hallucinated packages, missing safeguards & AI pattern

Personal AI assistant for work inside corporate constraints, built on coding agents and the tools, sessions, and permissions you already hav

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây

Lyrie.ai — The world's first autonomous AI cybersecurity agent. Built by OTT Cybersecurity LLC.

Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connector

Evidence-grounded cryptographic inventory and post-quantum migration planning for software repositories. Local static analysis, zero mandato

Govern: one Decionis verdict before a workflow step runs — a deploy, a migration, an infrastructure change, an agent's action — with a signe

Compartment is a self-hosted deployment system for small software on infrastructure your team controls.

A Mac vault that runs authenticated actions for AI agents over MCP. The agent gets the operation, never the key: no command reveals a stored

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free

Production CI/CD pipeline template with quality gates, container security, SLSA provenance, cosign signing, and automated release management

Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.

Auto mode for every coding agent, built on Jev: risk-scores every tool call with session context (deny / ask / allow), flags prompt injectio

Secure WebView for React Native auth, checkout, OAuth, and other controlled web flows.

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

json-guard, JSON metnini JSON.parse öncesinde tarayarak boyut, iç içe geçme, anahtar ve string uzunluğu sınırları uygulayan bir TypeScript kütüphanesidir.

Neden yükseliyor · JSON kaynaklı hizmet engelleme riskini somut bir demo ve ölçümle anlatması dikkat çekmiş olabilir. Ancak 3 günlük yaş, 77 yıldız, 2 commit ve 1 farklı yazar verisi erken ilgiyi gösterir; benimsenme veya olgunluk kanıtı değildir.

GitHub Actions workflow’larında kullanılan JavaScript action’ların kaynak kodundan `dist/` çıktısını yeniden oluşturup commit edilmiş dosyalarla karşılaştırır.

Neden yükseliyor · Repo yalnızca 1 günlük ve 30 yıldızlı; son 28 günlük commit ve farklı yazar verisi ölçülmediği için yükseliş eğilimi doğrulanamıyor. README’nin işaret ettiği supply-chain riski ve belirli bir denetim boşluğunu hedeflemesi ilgi çekmiş olabilir, ancak bu ilginin nedeni veya kullanıcı benimsemesi mevcut verilerle kanıtlanmış değil.

ThreatIntel-Aggregator, güvenlik feed’lerini birleştirip tehditleri analiz eden ve varlıklarla ilişkilendiren self-hosted bir threat intelligence platformudur.

Neden yükseliyor · 14 günde 54 yıldız almış; bu, yeni bir repo için dikkat çekici bir başlangıç. Ancak yalnızca 3 commit ve 2 farklı yazar bilgisi var; yükselişin nedenini veya kullanıcı benimsemesini gösteren bağımsız kanıt mevcut değil.

ToolReplay, AI agent’ların tool-call transcript’lerini determinism, yinelenen çağrılar ve izin kapsamı açısından denetleyen bir Python CLI’dir.

Neden yükseliyor · AI agent’ların davranışını denetlenebilir ve tekrarlanabilir kılma ihtiyacına doğrudan hitap ediyor; README’de örnek girdi ve çıktıyla çalışan bir kullanım gösteriliyor. 13 günde 184 yıldız dikkat çekiyor, ancak son 28 günde 2 commit ve 1 farklı yazar bakım ve benimsenmenin sürdürülebilirliği için henüz zayıf kanıt.

Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 cat

Maintainer-governed agent for evidence-backed open-source contribution proposals

Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.

Open-Source alternative app store for Android aimed to provide a secure Google Play alternative, offering verified, open-source apps with bu

Safety-first Windows PowerShell debloater for Brave Browser using enterprise policies, dry-run mode, backups, and restore.

AgentAegis is a lightweight plugin providing full-lifecycle runtime protection for OpenClaw.

The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit

Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

3x more usage on your coding agent, same quality. Have an multi-agent setup in mind? Bello already supports it. Mix models, run agents in pa

A fence keeps things out, but also in. This project is still in early, and active development.

Cover your Mac's screen with a hotkey while AI agents keep running, even with the lid closed. The covered screen glows when Claude Code, Cod

Run Windows and Linux programs on Windows, Linux and Android. A user-mode NT and Linux kernel emulator with WHP/KVM acceleration.

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed,

AgentGuard: Zero-Trust Security Foundation for AI Agents

An AI that administers Linux through typed, approval-gated, Ed25519-audited actions. The model selects the action; the daemon builds the com

Security checklist for vibe coded apps. AI rules file + automated audit + manual verification.

AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」（网安法·PIPL·等保2.0·数据出境·AI标识），并给出境内模型替代建议；可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源

A Python CLI tool that scans all repositories owned by a GitHub user/org for accidentally committed secrets (API keys, tokens, passwords, pr

Agent-assisted maintainership and development framework for Apache projects — Triage, Mentoring, Drafting (agent-authored fixes with human r

被动JS分析 + 框架识别 + 主动Fuzz + 响应指纹 — 红队API挖掘利器

Free, MIT-licensed MCP security testing from ClearFrame. Scan, audit, compare, and review locally; continue in the ClearFrame CLI or Mac app

A fast, keyboard-driven HTTP intercepting proxy and pentesting toolkit for the terminal built for humans and AI agents alike.

Alignment-research scaffold (autoresearch-style) for LLM guardrails: search over a single policy.md surface

macOS companion toolkit for power users

All-in-one Docker/Podman image: hermes-agent + hermes-webui + hermes-dashboard in a single container

"ULTRASHIP" Claude Code plugin — 39 skills, 33 tools, 11 agents for ship-ready workflows: planning, review, pentesting, safety guardrails, c

Claude Code skill that enables Claude to extract, analyze, reverse engineer iOS apps

DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.