Havuz

A codebase scanner that helps you not run malicous code

Black-box web penetration testing automation framework for AI Agents

Lightweight SSH login observability for Linux servers. Sends a rich push notification via ntfy on every SSH login and failed attempt, and sh

Agentless SOC & GRC — SIEM, FIM, MITRE ATT&CK, compliance over SSH. Nothing installed on servers. Web · Windows · Linux · Docker.

A sandbox service for running untrusted, agent-authored code that reports the isolation boundary each run executed behind. Lessons, no clone

An accelerator that reviews a Microsoft Fabric tenant end-to-end through metadata-only scans across governance, cost, capacity, performance,

Open-source AI security tool to scan and fix vulnerabilities in your vibe-coded projects before you ship. AXguard by AwareXone.

Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, S

Praxis Policy Engine (PPE)

Policy-aware AI permission reviewer for OpenCode V1 and V2. Evaluates tool and command requests, allowing, denying with feedback, or escalat

为 DeepSeek Harness 增加远程访问能力，并通过密码和 OTP 进行安全加固。 Adds secure remote access to DeepSeek Harness with password auth and TOTP two-factor authenti

本机 AI Agent 环境合规检测与修复 — 扫描代理泄漏、时区指纹、MCP 密钥等风控信号，降低 Claude / Cursor 等账号封号风险

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

ThreatIntel-Aggregator, güvenlik feed’lerini birleştirip tehditleri analiz eden ve varlıklarla ilişkilendiren self-hosted bir threat intelligence platformudur.

Neden yükseliyor · 14 günde 54 yıldız almış; bu, yeni bir repo için dikkat çekici bir başlangıç. Ancak yalnızca 3 commit ve 2 farklı yazar bilgisi var; yükselişin nedenini veya kullanıcı benimsemesini gösteren bağımsız kanıt mevcut değil.

OpenLoomi is an open-source AI coworker. It connects your work tools, understands what you’re working on, and tells you what needs your atte

A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum au

Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers, extensions, plugins, connector

AgentAegis is a lightweight plugin providing full-lifecycle runtime protection for OpenClaw.

Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

🪼 Lagune AI is your security copilot as you build, your Blue Team when you audit, whether you're a developer or not (no API key needed).

被动JS分析 + 框架识别 + 主动Fuzz + 响应指纹 — 红队API挖掘利器

An open taxonomy and scoring framework for evaluating AI agent sandboxes: 7 defense layers, 7 threat categories, 3 evaluation dimensions, 27

Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.

Policy guardrails for coding agents (Claude Code, Codex, Cursor) — every tool call is checked locally, before it runs.

Find and redact secrets in AI coding agent histories (Claude Code, and more).

Tamper-evident audit trails for AI agents: hash-chained Runtime Records, dependency-free, verifiable by anyone.

Self-hosted personal AI agent with a WebUI, memory, tools, MCP, sub-agents and automations. Connect local or cloud LLMs.

OAuth 2.1 Authorization Server for the Model Context Protocol (MCP)

Audit and fix your Mac's security in one command. No agent, no signup, open source.

Automated detection and tracking of fake engagement on GitHub — daily CI, zero infrastructure

One command. 29 battle-tested security checks built into every AI coding assistant you already use without leaving your IDE.

Feature-rich all-in-one self-hosted server & server fleet management (Web UI): patching, monitoring (agent + agentless/SNMP), CVE scanning,

The Rails audit skill for AI coding agents, ranked by blast radius. 🚂☢️

Hermes Agent (NousResearch) sandboxed by NVIDIA OpenShell — hardware-enforced network/filesystem/syscall policy, full memory + gateway stack

Cache Commander — a TUI and MCP server to explore, audit, and clean developer cache directories. Scan for CVEs, find outdated packages, recl

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations

Open-source AI-powered website audit CLI using the OpenAI API for SEO, UX, accessibility, performance, trust, and content analysis.

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CI

Agent skill for producing threat models for open-source projects

DPI-resistant SOCKS5/HTTP tunnel over TLS+WebSocket for self-hosted single-VPS setups

Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

Sandboxed OCI container images for AI coding agents, built reproducibly with Nix.

The AI security agent guards your code.

Evidence-driven production readiness checklist for shipping web applications with confidence

Run AI coding agents in sandboxed containers communicate via ACP

Zero-dependency Web Application Firewall in Go. Single binary. Three deployment modes. Tokenizer-based detection.

Runtime visibility for Python MCP servers. Captures tool calls, session lifecycle, module imports (SHA-256), and subprocess execution as str

🔒 Jail OpenCode, Claude Code, Copilot CLI and OmO in micro-VMs: only your project folders, only the networks you allow.