Havuz

Hermes Agent (NousResearch) sandboxed by NVIDIA OpenShell — hardware-enforced network/filesystem/syscall policy, full memory + gateway stack

Cache Commander — a TUI and MCP server to explore, audit, and clean developer cache directories. Scan for CVEs, find outdated packages, recl

AI 自主渗透测试 · 红队作战平台 | 多 Agent 自主推进 · 漏洞情报运营 · 后渗透与 C2 | LLM 三通道轮询 | 全程证据留痕 | 原百度攻防赛冠军项目独立演进版

Mini decentralised auth. Gives an existing auth system a key nobody holds, with governance over who can decrypt.

Evidence-driven Java security review workbench

Let your AI agent use your passwords and API keys - without ever letting it see them

Zero trace. Full answer. — Transparent Claude API proxy that anonymizes PII and sensitive data before it leaves your environment. From pente

A fetch wrapper that drops your custom auth headers when a redirect crosses to another origin.

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

Open Source Safe Roblox Account Manager 2026 Secure Clean Alt Manager

Laravel audit log & change history with real actor attribution (user / job / command / scheduler), cross-model change traces, time machine,

CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations

Post-quantum age key generation and paper backup tool with QR codes

SOC, incident response and SecOps for Linux servers in one agent: learns each host, watches it with zero-token sensors, triages with a small

A modular, drop-in middleware collection for Laravel AI SDK agents. Offers middleware across security, observability, performance and guidan

Security-oriented three-axis observability for sandboxed AI agents: model intent, app context, and runtime telemetry into verifiable evidenc

The agent that writes the code never reviews it. Spec-driven TDD with agent separation, adversarial QA, and dynamic rigor for Claude Code.

Claude Code Monitor : Monitor & audit every action Claude Code takes on your computer.

Open-source AI-powered website audit CLI using the OpenAI API for SEO, UX, accessibility, performance, trust, and content analysis.

A honeypot and guestbook for AI agents that land on a machine they weren't invited to

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CI

Agentshield is open source defense for Kubernetes and AWS. It learns how your workloads really talk, flags lateral movement with evidence, a

Local-first encrypted vault for API keys, tokens, SSH keys, database credentials, and developer configs. Nokuo 是一个本地优先的开发者密钥保险库，用于安全管

PE/ELF x86/x64 CFG extractor

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Pa

Terminal UI to manage SSH keys, edit ~/.ssh/config, and audit your SSH security. Encrypted metadata + backups, an A–F security grade, byte-i

Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerabili

Agent skill for producing threat models for open-source projects

TOTP codes in Chrome. Your secrets never leave your device. No host permissions.

dj - Dynamic JS File Extractor - intelligently detects dynamically loaded JavaScript files by statically analyzing website HTML and JS code

DPI-resistant SOCKS5/HTTP tunnel over TLS+WebSocket for self-hosted single-VPS setups

Offline pentest workflow tracker — turns nmap output into a port-aware, KB-matched recon checklist in under 30 seconds. Self-hosted, single

Hardening Linux automatisé avec Ansible — conformité ANSSI BP-028 (niveaux M/I/R/E). Durcissement système, réseau, SSH, utilisateurs + audit

The self-hosted token, certificate, license, and secret expiration manager with automated Certificate Lifecycle Management (CertOps) for tea

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

AI code quality toolkit — deterministic linter for the AI coding era. 22 detectors, GitHub Action PR gate, zero LLM required.

Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. Bui

WireGuard, AmneziaWG, Cisco AnyConnect and Tailscale in one native, free and open-source macOS VPN client: SwiftUI app, Network Extension, k

Zero-trust agentic AI platform. Supports SaaS and OnPrem (airgapped) deployments.

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segreg

使用大模型时，隐藏你的密码、token 等敏感信息。适配市面上各种工具，一键安装即可用。 / Hide passwords, tokens and secrets from the model. Works with everyday tools — one-click inst

AI coding agent skills for shipping, maintaining secure WordPress Sites

Security-hardened openclaw with auth gateway, AES-256 encryption and session management

Covert Coder — a local-first sovereign AI development environment for governed models, workflows, execution, evidence, and verification.

Zero-dependency TypeScript secret and PII redaction for any SDK, logs, HTTP, LLM prompts, and scoped MCP tool boundaries.

Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys

Auditable, token-gated DeepSeek Harness remote gateway: mobile QR access, per-device sessions, Host/Origin rewrite, settings/credentials/dir

AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy,