Havuz

The black box for AI-written code. Passive decision graph linking every commit to the agent prompts behind it: drift detection, DLP audit of

A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum au

Proper sandboxing for agentic coding and web browsing

Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they exe

Runtime security for AI agents: discover agents, map their permissions, and enforce what they can do.

Open-Source alternative app store for Android aimed to provide a secure Google Play alternative, offering verified, open-source apps with bu

Curated Microsoft Security skills for AI agents - Defender, Sentinel, Entra, Purview, Intune, Security Copilot

Run Windows and Linux programs on Windows, Linux and Android. A user-mode NT and Linux kernel emulator with WHP/KVM acceleration.

Coverage, security and code quality for coding agents

Security checklist for vibe coded apps. AI rules file + automated audit + manual verification.

被动JS分析 + 框架识别 + 主动Fuzz + 响应指纹 — 红队API挖掘利器

An open taxonomy and scoring framework for evaluating AI agent sandboxes: 7 defense layers, 7 threat categories, 3 evaluation dimensions, 27

Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, san

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

TOTP codes in Chrome. Your secrets never leave your device. No host permissions.

Zero-dependency Web Application Firewall in Go. Single binary. Three deployment modes. Tokenizer-based detection.

🔒 Jail OpenCode, Claude Code, Copilot CLI and OmO in micro-VMs: only your project folders, only the networks you allow.

Free, open-source SSH client, SFTP, tunnels, database GUI and a secure AI-agent (MCP) bridge in one app a MobaXterm, PuTTY and Termius al

Myrtia — agent-native red teaming for LLMs and AI agents: a deliberating council of attacker models (propose, cross-critique, Borda vote, ch

An AI chat agent (harness) with integrated tools, skills and an optional knowledge base. Chat with any OpenAI-compatible LLM, use built-in i

An accelerator that reviews a Microsoft Fabric tenant end-to-end through metadata-only scans across governance, cost, capacity, performance,

Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, S

Claude and ChatGPT now log into your app as your customers. OneHuman decides what they can see and do. Join our community: https://discord.g

Agent Receipts — cryptographically signed audit trails for AI agent actions. Protocol spec, SDKs (Go, TypeScript, Python), and MCP proxy.

面向 CTF 竞赛评测平台（TSec Benchmark）的自动化 Web/逻辑漏洞挖掘与利用 Agent：分层调度 + 多会话并发 + 跨会话共享黑板 + 平台权威校验

本机 AI Agent 环境合规检测与修复 — 扫描代理泄漏、时区指纹、MCP 密钥等风控信号，降低 Claude / Cursor 等账号封号风险

PII masking middleware for DeepSeek Harness: anonymize names, phones, emails, ID cards, bank cards, keys, and addresses to placeholders befo

Practical Linux server hardening — every item is failure → fix → verify. SSH, firewall, service binding, secrets, DB auth, and more.

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

Local CLI for auditing AI agent skills, conflicts, duplicates, safety risks, and context cost across coding agents.

Catch .env secrets leaking into git: a pre-commit hook and CLI that fails when an API key or any value of your env files is staged, tracked

Copy 2FA codes on your Mac with one shortcut: verification codes from Mail and Messages plus a built-in TOTP/HOTP authenticator. Free, open

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

Niubi Guard, GitHub repository’lerindeki Issue ve yorumları spam, taciz ve koordineli abuse açısından tarayıp yapılandırılabilir yanıtlar öneren bir CLI ve web arayüzüdür.

Neden yükseliyor · 1310 yıldızın 116 günde toplanması ve README’deki Trendshift görünürlüğü dikkat çektiğini gösteriyor; ancak bunun hangi kullanıcı ihtiyacından kaynaklandığı veya gerçek kullanım düzeyi ölçümlerden doğrulanamıyor. Son 28 günde commit ve farklı yazar yok; bu nedenle ilginin güncel geliştirme ya da benimsemeyle sürdüğüne dair kanıt bulunmuyor.

Blitz Strike, penetration-testing iş akışını MCP üzerinden sunan ve bulguları canlı doğrulamaya yönelen bir güvenlik aracıdır.

Neden yükseliyor · 15 günlük yaşına rağmen 512 yıldız almış; MCP tabanlı agent iş akışlarıyla penetration testing'i tek entegrasyonda toplama vaadi dikkat çekiyor. Ancak son 28 günde yalnızca 2 commit ve 1 farklı yazar görünmesi, bu ilginin aktif geliştirme veya topluluk katkısıyla henüz desteklenmediğini gösteriyor.

Personal AI assistant for work inside corporate constraints, built on coding agents and the tools, sessions, and permissions you already hav

Let AI agents investigate and operate infrastructure through declared actions, bounded by policy and host-side checks. Approvals when requir

Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connector

Open-source cybersecurity analysis agent for Claude Code. Scans projects for vulnerabilities across all OWASP 2025 Top 10 and CWE Top 25 cat

Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call un

The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit

Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

3x more usage on your coding agent, same quality. Have an multi-agent setup in mind? Bello already supports it. Mix models, run agents in pa

🪼 Lagune AI is your security copilot as you build, your Blue Team when you audit, whether you're a developer or not (no API key needed).

Find the plaintext secrets on your Mac and move them behind Touch ID, injected just in time without breaking the tools that read them. Free

Self-hosted bug-bounty platform — verification-first recon & DAST, continuous monitoring. Your data stays on your machine.

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

Lightweight, stateless privacy gateway for LLM APIs — redact secrets before OpenAI/Anthropic upstreams and restore them transparently in SSE

AI-powered multi-agent security auditor for Symfony applications, provider-agnostic via symfony/ai.