Havuz

A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.

Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.

Coverage, security and code quality for coding agents

Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault,

Terminal UI to manage SSH keys, edit ~/.ssh/config, and audit your SSH security. Encrypted metadata + backups, an A–F security grade, byte-i

The self-hosted token, certificate, license, and secret expiration manager with automated Certificate Lifecycle Management (CertOps) for tea

Automatic, model-driven permission review for OpenCode

Free client-side password and key generator for secure passwords, API keys, UUIDs, JWT secrets, and encryption keys. Powered by the Web Cryp

Static-analysis-based dataset for training LLMs to detect, explain, and patch security vulnerabilities (Java, Korean/English annotations, ve

Soup Wall: open-source security for AI agents and model traffic. Local Agent, Gateway, self-hosted Console. Apache-2.0.

Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential con

Proper sandboxing for agentic coding and web browsing

AgentGuard: Zero-Trust Security Foundation for AI Agents

All-in-one Docker/Podman image: hermes-agent + hermes-webui + hermes-dashboard in a single container

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

Lightweight, stateless privacy gateway for LLM APIs — redact secrets before OpenAI/Anthropic upstreams and restore them transparently in SSE

The AI-friendly C23 compiler for security research, built on LLVM [WIP]

Security-oriented three-axis observability for sandboxed AI agents: model intent, app context, and runtime telemetry into verifiable evidenc

AI coding agent skills for shipping, maintaining secure WordPress Sites

Every live OMP session. One private page, in any modern browser.

A collection of public writeups on attacks against AI agents: prompt injection, tool abuse, memory poisoning, and data exfiltration.

Remove metadata from photos, PDFs, Office documents, audio and video. Strips EXIF, GPS location, camera serial numbers, author names and tim

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

No WiFi? Now WiFi. One command. 27 techniques. Bypass any captive portal.

Free, open-source SSH client, SFTP, tunnels, database GUI and a secure AI-agent (MCP) bridge in one app a MobaXterm, PuTTY and Termius al

基于 LLM 的白盒漏洞挖掘 Agent。四条挖掘路径（启发式、快速扫描 Sink 回溯、历史漏洞绕过、无约束）+ Docker 靶场 / 局部 harness / 静态验证，支持互联网复现与攻击链串联。 LLM-based white-box vuln mining agent

Amazon Bedrock AgentCore enterprise platform accelerator with AWS CDK, Terraform organization guardrails, MCP/A2A agents, security, memory,

面向 CTF 竞赛评测平台（TSec Benchmark）的自动化 Web/逻辑漏洞挖掘与利用 Agent：分层调度 + 多会话并发 + 跨会话共享黑板 + 平台权威校验

GSC — verified remediation engine: SAST that proves exploits (PoC), verifies fixes (Proof-of-Fix), and self-heals CI. Apache 2.0 + Commercia

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

Catch .env secrets leaking into git: a pre-commit hook and CLI that fails when an API key or any value of your env files is staged, tracked

Copy 2FA codes on your Mac with one shortcut: verification codes from Mail and Messages plus a built-in TOTP/HOTP authenticator. Free, open

droast - a dockerfile linter that actually has opinions 🔥

Semia, security audit for AI agent skills.

Personal AI assistant for work inside corporate constraints, built on coding agents and the tools, sessions, and permissions you already hav

The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit

Curated Microsoft Security skills for AI agents - Defender, Sentinel, Entra, Purview, Intune, Security Copilot

Run Windows and Linux programs on Windows, Linux and Android. A user-mode NT and Linux kernel emulator with WHP/KVM acceleration.

Self-hosted bug-bounty platform — verification-first recon & DAST, continuous monitoring. Your data stays on your machine.

AI-powered multi-agent security auditor for Symfony applications, provider-agnostic via symfony/ai.

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PH

Lightweight open-core SIEM in Rust — S3-compatible for logs, Postgres for state.

Passive Bluetooth neighbourhood monitor for Raspberry Pi and Linux: a live radar, device triage, categories and alerts for new devices.

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

Zero-trust agentic AI platform. Supports SaaS and OnPrem (airgapped) deployments.

Auditable, token-gated DeepSeek Harness remote gateway: mobile QR access, per-device sessions, Host/Origin rewrite, settings/credentials/dir

All-in-one open-source framework & middleware for enterprise-grade multi-tenant and multi-tier XaaS Services development

Docker sandbox for the Claude Code CLI. Runs Claude against one project folder — including with --dangerously-skip-permissions — while your

Build AI agents and LLM workflows visually. Security-maintained continuation of Flowise: security fixes, Apache-2.0 only, drop-in for your e