Havuz

Open-source AI-powered website audit CLI using the OpenAI API for SEO, UX, accessibility, performance, trust, and content analysis.

Tiny filesystem honeypot for macOS. Mounts fake secret files (.env, id_rsa, credentials.json) via WebDAV (no root) or NFS (root) — any acces

One command. 29 battle-tested security checks built into every AI coding assistant you already use without leaving your IDE.

Open-source security skills for AI coding agents. Grounded in OWASP, NIST, MITRE ATT&CK, CIS. Works with Claude Code, Gemini CLI, Cursor, Co

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

Zero trace. Full answer. — Transparent Claude API proxy that anonymizes PII and sensitive data before it leaves your environment. From pente

Feature-rich all-in-one self-hosted server & server fleet management (Web UI): patching, monitoring (agent + agentless/SNMP), CVE scanning,

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segreg

DropLink is a decentralized, temporary peer-to-peer sharing platform. Files, folders, links, and chat messages move directly between browser

Terminal UI to manage SSH keys, edit ~/.ssh/config, and audit your SSH security. Encrypted metadata + backups, an A–F security grade, byte-i

Self-hosted personal AI agent with a WebUI, memory, tools, MCP, sub-agents and automations. Connect local or cloud LLMs.

MCP server for AI agent for cybersecurity: automate assessment of documents, questionnaires & reports. Multi-format parsing, RAG knowledge b

Secure MCP access to local repositories — without shell, Git, or arbitrary writes.

Network-wide ad & tracker blocking DNS server. Go backend, React dashboard, 200K+ blocked domains, real-time analytics via WebSocket.

Cache Commander — a TUI and MCP server to explore, audit, and clean developer cache directories. Scan for CVEs, find outdated packages, recl

Hermes Agent (NousResearch) sandboxed by NVIDIA OpenShell — hardware-enforced network/filesystem/syscall policy, full memory + gateway stack

TOTP codes in Chrome. Your secrets never leave your device. No host permissions.

Confine an AI coding agent to one directory with a BPF-LSM program, and watch every escape it tries.

🥷 Give your codebase a black belt. Local code intelligence, security analysis, and compiler-backed facts for humans and AI.

Offline pentest workflow tracker — turns nmap output into a port-aware, KB-matched recon checklist in under 30 seconds. Self-hosted, single

Post-quantum age key generation and paper backup tool with QR codes

The agent that writes the code never reviews it. Spec-driven TDD with agent separation, adversarial QA, and dynamic rigor for Claude Code.

Luvv-MCP 是一个 AI 原生的前端安全分析引擎，接入 Claude Code 后，你说一句"帮我审计这个网站"，AI 就能自动完成技术栈识别（1.8 万条规则覆盖 CMS/框架/CDN/中间件）、泄露扫描（阿里云 AK、GitHub Token、Webhook、J

Vulnerability scanning with your own scanners and threat feeds, plus a coding agent that opens the fix PR. CLI, GitHub Action, or scheduled

Zero-trust agentic AI platform. Supports SaaS and OnPrem (airgapped) deployments.

AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy,

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

AI code quality toolkit — deterministic linter for the AI coding era. 22 detectors, GitHub Action PR gate, zero LLM required.

Six skills tell coding agents how to work. Two guards enforce the parts that should not depend on judgment.

Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

Experimental source-available SQLite/libSQL backend for human-and-agent-native workflows, with Studio and scoped MCP access.

Every way an LLM can break one SDK to stop it. Injection. Hallucination. Leakage. Handled.

The AI security agent guards your code.

Security-hardened openclaw with auth gateway, AES-256 encryption and session management

Docker sandbox for the Claude Code CLI. Runs Claude against one project folder — including with --dangerously-skip-permissions — while your

Local guardrails for coding agents. Policy, approvals, 86 safety packs, OS sandbox, audit trail — no Docker.

Defense-in-depth security toolkit for LLM agents — taint tracking, proxy secret guard, policy engine, and red-team benchmarking

Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys

Browser extension with 35+ rules for keeping your AI agent safe while browsing

Local-first security scanner, MCP protocol inspector, dynamic fuzzer, Docker sandbox, and report generator for Model Context Protocol server

Sandboxed OCI container images for AI coding agents, built reproducibly with Nix.

Replayable proof that a bug fails before the patch and passes after it - a GitHub App that turns fix claims into verifiable evidence bundles

🛡️Self-hosted security analytics & threat detection for Discord servers. Real-time phishing, raids, spam detection. Privacy-first with GDPR

One command. Full stack. Zero compromise. — All-in-one Claude Code skill with 33 modes, 6-layer security, 23 hooks, and 75% token savings

Hide Your TailwindCSS 👀

Generates executable Proof-of-Concept for any bug in any project. AI agents discover and reproduce vulnerabilities — verified, not hallucina

Cryptographic trust and authorization evidence for AI agents. Every action a receipt, every grant a proof.

Document extraction and validation for logistics companies.

Run AI coding agents in sandboxed containers communicate via ACP

Pure-Rust Android decompiler and security-audit suite. DEX → Java, Hermes → JavaScript. Cross-layer taint across the React Native bridge. Cy