Havuz

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

Lightweight, stateless privacy gateway for LLM APIs — redact secrets before OpenAI/Anthropic upstreams and restore them transparently in SSE

🔓 An AI web-pentest skill for Claude Code. Point it at a site you're authorized to test — it maps the attack surface, works through the OWAS

The AI-friendly C23 compiler for security research, built on LLVM [WIP]

nas: a zero-dependency Python CLI + MCP server for Synology DSM 7. One-command audit and fix for the C3RB3R / .L0CK3D ransomware campaign; h

Agent Canary 3.0: open-source MCP, SDK, and CLI security toolkit with a guarded execution gateway, decoy signals, local tests, and public ac

Find and redact secrets in AI coding agent histories (Claude Code, and more).

Tamper-evident audit trails for AI agents: hash-chained Runtime Records, dependency-free, verifiable by anyone.

Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, san

OAuth 2.1 Authorization Server for the Model Context Protocol (MCP)

Offline password, identity, and secret vault. Argon2id + AES-256-GCM, zero servers, zero telemetry.

AI 自主渗透测试 · 红队作战平台 | 多 Agent 自主推进 · 漏洞情报运营 · 后渗透与 C2 | LLM 三通道轮询 | 全程证据留痕 | 原百度攻防赛冠军项目独立演进版

Let your AI agent use your passwords and API keys - without ever letting it see them

A honeypot and guestbook for AI agents that land on a machine they weren't invited to

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. Bui

WireGuard, AmneziaWG, Cisco AnyConnect and Tailscale in one native, free and open-source macOS VPN client: SwiftUI app, Network Extension, k

Auditable, token-gated DeepSeek Harness remote gateway: mobile QR access, per-device sessions, Host/Origin rewrite, settings/credentials/dir

Niubi Guard, GitHub repository’lerindeki Issue ve yorumları spam, taciz ve koordineli abuse açısından tarayıp yapılandırılabilir yanıtlar öneren bir CLI ve web arayüzüdür.

Neden yükseliyor · 1310 yıldızın 116 günde toplanması ve README’deki Trendshift görünürlüğü dikkat çektiğini gösteriyor; ancak bunun hangi kullanıcı ihtiyacından kaynaklandığı veya gerçek kullanım düzeyi ölçümlerden doğrulanamıyor. Son 28 günde commit ve farklı yazar yok; bu nedenle ilginin güncel geliştirme ya da benimsemeyle sürdüğüne dair kanıt bulunmuyor.

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK,

droast - a dockerfile linter that actually has opinions 🔥

OpenLoomi is an open-source AI coworker. It connects your work tools, understands what you’re working on, and tells you what needs your atte

DianXing - AI-Driven End-to-End Code Security Auditing

Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential con

Semia, security audit for AI agent skills.

Store, share, and resume AI coding sessions.

World's first Face Authentication enabled MacOS App-locker, completely free and open-source. Unlock your Mac apps using Face , TouchID or pa

DeepSec — AI Security Offense & Defense Platform. Shield audits AI-generated code for hallucinated packages, missing safeguards & AI pattern

Mantis Hack

Personal AI assistant for work inside corporate constraints, built on coding agents and the tools, sessions, and permissions you already hav

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/a

Lyrie.ai — The world's first autonomous AI cybersecurity agent. Built by OTT Cybersecurity LLC.

Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây

Evidence-grounded cryptographic inventory and post-quantum migration planning for software repositories. Local static analysis, zero mandato

Govern: one Decionis verdict before a workflow step runs — a deploy, a migration, an infrastructure change, an agent's action — with a signe

Compartment is a self-hosted deployment system for small software on infrastructure your team controls.

A Mac vault that runs authenticated actions for AI agents over MCP. The agent gets the operation, never the key: no command reveals a stored

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free

Production CI/CD pipeline template with quality gates, container security, SLSA provenance, cosign signing, and automated release management

Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.

Auto mode for every coding agent, built on Jev: risk-scores every tool call with session context (deny / ask / allow), flags prompt injectio

Alignment-research scaffold (autoresearch-style) for LLM guardrails: search over a single policy.md surface

Secure WebView for React Native auth, checkout, OAuth, and other controlled web flows.

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

Reusable JWT authentication starter for Spring Boot featuring auto-configuration, Spring Security integration, JWT authentication filters, p

Policy guardrails for coding agents (Claude Code, Codex, Cursor) — every tool call is checked locally, before it runs.

Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault,

Free, open-source tool to build a NIST CSF 2.0 Current Profile and gap analysis from an organization's documents (AI-assisted, human-validat

Audit and fix your Mac's security in one command. No agent, no signup, open source.