Havuz

Offline pentest workflow tracker — turns nmap output into a port-aware, KB-matched recon checklist in under 30 seconds. Self-hosted, single

TOTP codes in Chrome. Your secrets never leave your device. No host permissions.

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

AI code quality toolkit — deterministic linter for the AI coding era. 22 detectors, GitHub Action PR gate, zero LLM required.

Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. Bui

Zero-trust agentic AI platform. Supports SaaS and OnPrem (airgapped) deployments.

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segreg

Security-hardened openclaw with auth gateway, AES-256 encryption and session management

Zero-dependency TypeScript secret and PII redaction for any SDK, logs, HTTP, LLM prompts, and scoped MCP tool boundaries.

Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys

Auditable, token-gated DeepSeek Harness remote gateway: mobile QR access, per-device sessions, Host/Origin rewrite, settings/credentials/dir

AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy,

Local-first MCP security scanner for AI-generated apps: four open-source engines plus the Synvoya engine. Scan → fix → rescan from Claude Co

Defense-in-depth security toolkit for LLM agents — taint tracking, proxy secret guard, policy engine, and red-team benchmarking

Sandboxed OCI container images for AI coding agents, built reproducibly with Nix.

The AI security agent guards your code.

让你通过浏览器安全地远程使用 DeepSeek Harness：登录、MFA 两步验证、角色权限和远程文件预览。 | Use DeepSeek Harness securely in a remote browser with login, MFA, roles, and rem

One command. Full stack. Zero compromise. — All-in-one Claude Code skill with 33 modes, 6-layer security, 23 hooks, and 75% token savings

Every way an LLM can break one SDK to stop it. Injection. Hallucination. Leakage. Handled.

Fast, zero-dependency access log analyzer, security threat inspector, and TUI dashboard for Caddy v2

Docker sandbox for the Claude Code CLI. Runs Claude against one project folder — including with --dangerously-skip-permissions — while your

Network-wide ad & tracker blocking DNS server. Go backend, React dashboard, 200K+ blocked domains, real-time analytics via WebSocket.

Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

Hide Your TailwindCSS 👀

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

Luvv-MCP 是一个 AI 原生的前端安全分析引擎，接入 Claude Code 后，你说一句"帮我审计这个网站"，AI 就能自动完成技术栈识别（1.8 万条规则覆盖 CMS/框架/CDN/中间件）、泄露扫描（阿里云 AK、GitHub Token、Webhook、J

Local guardrails for coding agents. Policy, approvals, 86 safety packs, OS sandbox, audit trail — no Docker.

Evidence-driven production readiness checklist for shipping web applications with confidence

Confine an AI coding agent to one directory with a BPF-LSM program, and watch every escape it tries.

Cryptographic trust and authorization evidence for AI agents. Every action a receipt, every grant a proof.

Run AI coding agents in sandboxed containers communicate via ACP

Safe runtime for Claude Code, built to be yours.

🔒 Jail OpenCode, Claude Code, Copilot CLI and OmO in micro-VMs: only your project folders, only the networks you allow.

Local-first security scanner, MCP protocol inspector, dynamic fuzzer, Docker sandbox, and report generator for Model Context Protocol server

Zero-dependency Web Application Firewall in Go. Single binary. Three deployment modes. Tokenizer-based detection.

Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as str

Pure-Rust Android decompiler and security-audit suite. DEX → Java, Hermes → JavaScript. Cross-layer taint across the React Native bridge. Cy

AuditSentry — AI-powered smart contract security auditor for Claude Code. Automated vulnerability detection, exploit PoCs, mainnet-fork simu

MCP server with 55 security intelligence tools — CVE/KEV, MITRE ATLAS+D3FEND, Sigma detection rules, email security posture (SPF/DMARC), dom

Generates executable Proof-of-Concept for any bug in any project. AI agents discover and reproduce vulnerabilities — verified, not hallucina

🛡️Self-hosted security analytics & threat detection for Discord servers. Real-time phishing, raids, spam detection. Privacy-first with GDPR

Browser extension with 35+ rules for keeping your AI agent safe while browsing

Keyed reversible source code obfuscator for Rust: syntactically valid, functionally identical, spiritually hostile.

OSS license watchdog. Monitors GitHub repos you depend on and alerts you when a license changes, explaining exactly what you can no longer d

Security gate for AI-generated code - blocks the build until vulnerabilities are fixed

Claude Code Architecture Deep Analysis — 14-chapter report, 7 languages | Claude Code 架构全景分析 — 14章报告，7种语言

Coral is an open-source, local-first session bridge that lets AI agents borrow a user's already-authenticated browser sessions on a per-site

Replayable proof that a bug fails before the patch and passes after it - a GitHub App that turns fix claims into verifiable evidence bundles

Document extraction and validation for logistics companies.