Havuz

Bộ công cụ và tập hợp skill hỗ trợ phân tích phần mềm, khôi phục cấu trúc nguồn ở mức cần thiết, rà soát bảo mật, kiểm tra phụ thuộc và xây

A Jellyfin plugin that adds native two-factor authentication (TOTP, email OTP) with trusted device tokens, TV device pairing, LAN bypass, an

A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum au

Proper sandboxing for agentic coding and web browsing

Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connector

Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 cat

Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they exe

Govern: one Decionis verdict before a workflow step runs — a deploy, a migration, an infrastructure change, an agent's action — with a signe

Maintainer-governed agent for evidence-backed open-source contribution proposals

Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.

Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call un

Compartment is a self-hosted deployment system for small software on infrastructure your team controls.

AgentAegis is a lightweight plugin providing full-lifecycle runtime protection for OpenClaw.

The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit

A Mac vault that runs authenticated actions for AI agents over MCP. The agent gets the operation, never the key: no command reveals a stored

Curated Microsoft Security skills for AI agents - Defender, Sentinel, Entra, Purview, Intune, Security Copilot

Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

3x more usage on your coding agent, same quality. Have an multi-agent setup in mind? Bello already supports it. Mix models, run agents in pa

🪼 Lagune AI is your security copilot as you build, your Blue Team when you audit, whether you're a developer or not (no API key needed).

A fence keeps things out, but also in. This project is still in early, and active development.

Free Course : Data, Machine Learning, Deep Learning and AI Engineering, the long way round: the math, the code, the systems and the security

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed,

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free

LAN Sheriff watches which servers your network talks to. Self-hosted, no account. Observes only; blocks nothing. Built by 291 Group.

Coverage, security and code quality for coding agents

AgentGuard: Zero-Trust Security Foundation for AI Agents

Production CI/CD pipeline template with quality gates, container security, SLSA provenance, cosign signing, and automated release management

Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.

Auto mode for every coding agent, built on Jev: risk-scores every tool call with session context (deny / ask / allow), flags prompt injectio

Security checklist for vibe coded apps. AI rules file + automated audit + manual verification.

AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」（网安法·PIPL·等保2.0·数据出境·AI标识），并给出境内模型替代建议；可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源

A Python CLI tool that scans all repositories owned by a GitHub user/org for accidentally committed secrets (API keys, tokens, passwords, pr

被动JS分析 + 框架识别 + 主动Fuzz + 响应指纹 — 红队API挖掘利器

Free, MIT-licensed MCP security testing from ClearFrame. Scan, audit, compare, and review locally; continue in the ClearFrame CLI or Mac app

Self-hosted bug-bounty platform — verification-first recon & DAST, continuous monitoring. Your data stays on your machine.

A fast, keyboard-driven HTTP intercepting proxy and pentesting toolkit for the terminal built for humans and AI agents alike.

Alignment-research scaffold (autoresearch-style) for LLM guardrails: search over a single policy.md surface

macOS companion toolkit for power users

Secure WebView for React Native auth, checkout, OAuth, and other controlled web flows.

All-in-one Docker/Podman image: hermes-agent + hermes-webui + hermes-dashboard in a single container

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

"ULTRASHIP" Claude Code plugin — 39 skills, 33 tools, 11 agents for ship-ready workflows: planning, review, pentesting, safety guardrails, c

Claude Code skill that enables Claude to extract, analyze, reverse engineer iOS apps

DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.

Lightweight, stateless privacy gateway for LLM APIs — redact secrets before OpenAI/Anthropic upstreams and restore them transparently in SSE

AI-powered multi-agent security auditor for Symfony applications, provider-agnostic via symfony/ai.

Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.

Policy guardrails for coding agents (Claude Code, Codex, Cursor) — every tool call is checked locally, before it runs.

A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx

The AI-friendly C23 compiler for security research, built on LLVM [WIP]