Havuz

A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact c

Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 cat

Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they exe

Fail-closed swarm orchestration with epoch-fenced work and late-completion rejection.

Evidence-grounded cryptographic inventory and post-quantum migration planning for software repositories. Local static analysis, zero mandato

Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.

Govern: one Decionis verdict before a workflow step runs — a deploy, a migration, an infrastructure change, an agent's action — with a signe

Maintainer-governed agent for evidence-backed open-source contribution proposals

Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.

Open-Source alternative app store for Android aimed to provide a secure Google Play alternative, offering verified, open-source apps with bu

Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call un

Compartment is a self-hosted deployment system for small software on infrastructure your team controls.

Safety-first Windows PowerShell debloater for Brave Browser using enterprise policies, dry-run mode, backups, and restore.

AgentAegis is a lightweight plugin providing full-lifecycle runtime protection for OpenClaw.

The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit

A Mac vault that runs authenticated actions for AI agents over MCP. The agent gets the operation, never the key: no command reveals a stored

Curated Microsoft Security skills for AI agents - Defender, Sentinel, Entra, Purview, Intune, Security Copilot

Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

3x more usage on your coding agent, same quality. Have an multi-agent setup in mind? Bello already supports it. Mix models, run agents in pa

Text-to-SQL access control: schema selection that gives the LLM only the tables the caller is allowed to read. Row-level-security-aware tabl

🪼 Lagune AI is your security copilot as you build, your Blue Team when you audit, whether you're a developer or not (no API key needed).

Cover your Mac's screen with a hotkey while AI agents keep running, even with the lid closed. The covered screen glows when Claude Code, Cod

Free Course : Data, Machine Learning, Deep Learning and AI Engineering, the long way round: the math, the code, the systems and the security

A fence keeps things out, but also in. This project is still in early, and active development.

Run Windows and Linux programs on Windows, Linux and Android. A user-mode NT and Linux kernel emulator with WHP/KVM acceleration.

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed,

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free

LAN Sheriff watches which servers your network talks to. Self-hosted, no account. Observes only; blocks nothing. Built by 291 Group.

Coverage, security and code quality for coding agents

AgentGuard: Zero-Trust Security Foundation for AI Agents

Production CI/CD pipeline template with quality gates, container security, SLSA provenance, cosign signing, and automated release management

Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.

Auto mode for every coding agent, built on Jev: risk-scores every tool call with session context (deny / ask / allow), flags prompt injectio

Security checklist for vibe coded apps. AI rules file + automated audit + manual verification.

An AI that administers Linux through typed, approval-gated, Ed25519-audited actions. The model selects the action; the daemon builds the com

A Python CLI tool that scans all repositories owned by a GitHub user/org for accidentally committed secrets (API keys, tokens, passwords, pr

AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」（网安法·PIPL·等保2.0·数据出境·AI标识），并给出境内模型替代建议；可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源

Agent-assisted maintainership and development framework for Apache projects — Triage, Mentoring, Drafting (agent-authored fixes with human r

被动JS分析 + 框架识别 + 主动Fuzz + 响应指纹 — 红队API挖掘利器

Free, MIT-licensed MCP security testing from ClearFrame. Scan, audit, compare, and review locally; continue in the ClearFrame CLI or Mac app

The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.

Self-hosted bug-bounty platform — verification-first recon & DAST, continuous monitoring. Your data stays on your machine.

A fast, keyboard-driven HTTP intercepting proxy and pentesting toolkit for the terminal built for humans and AI agents alike.

Alignment-research scaffold (autoresearch-style) for LLM guardrails: search over a single policy.md surface

macOS companion toolkit for power users

Secure WebView for React Native auth, checkout, OAuth, and other controlled web flows.

All-in-one Docker/Podman image: hermes-agent + hermes-webui + hermes-dashboard in a single container

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs an