Havuz

Evidence-driven Java security review workbench

Let your AI agent use your passwords and API keys - without ever letting it see them

Zero trace. Full answer. — Transparent Claude API proxy that anonymizes PII and sensitive data before it leaves your environment. From pente

A fetch wrapper that drops your custom auth headers when a redirect crosses to another origin.

GitHub Actions workflow’larında kullanılan JavaScript action’ların kaynak kodundan `dist/` çıktısını yeniden oluşturup commit edilmiş dosyalarla karşılaştırır.

Neden yükseliyor · Repo yalnızca 1 günlük ve 30 yıldızlı; son 28 günlük commit ve farklı yazar verisi ölçülmediği için yükseliş eğilimi doğrulanamıyor. README’nin işaret ettiği supply-chain riski ve belirli bir denetim boşluğunu hedeflemesi ilgi çekmiş olabilir, ancak bu ilginin nedeni veya kullanıcı benimsemesi mevcut verilerle kanıtlanmış değil.

Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.

Open Source Safe Roblox Account Manager 2026 Secure Clean Alt Manager

Laravel audit log & change history with real actor attribution (user / job / command / scheduler), cross-model change traces, time machine,

CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations

Post-quantum age key generation and paper backup tool with QR codes

SOC, incident response and SecOps for Linux servers in one agent: learns each host, watches it with zero-token sensors, triages with a small

A modular, drop-in middleware collection for Laravel AI SDK agents. Offers middleware across security, observability, performance and guidan

Security-oriented three-axis observability for sandboxed AI agents: model intent, app context, and runtime telemetry into verifiable evidenc

The agent that writes the code never reviews it. Spec-driven TDD with agent separation, adversarial QA, and dynamic rigor for Claude Code.

Claude Code Monitor : Monitor & audit every action Claude Code takes on your computer.

Open-source AI-powered website audit CLI using the OpenAI API for SEO, UX, accessibility, performance, trust, and content analysis.

A honeypot and guestbook for AI agents that land on a machine they weren't invited to

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CI

Agentshield is open source defense for Kubernetes and AWS. It learns how your workloads really talk, flags lateral movement with evidence, a

Local-first encrypted vault for API keys, tokens, SSH keys, database credentials, and developer configs. Nokuo 是一个本地优先的开发者密钥保险库，用于安全管

PE/ELF x86/x64 CFG extractor

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Pa

Terminal UI to manage SSH keys, edit ~/.ssh/config, and audit your SSH security. Encrypted metadata + backups, an A–F security grade, byte-i

Open-source, self-hosted attack surface management platform with distributed agents for asset discovery, scan orchestration, and vulnerabili

ThreatIntel-Aggregator, güvenlik feed’lerini birleştirip tehditleri analiz eden ve varlıklarla ilişkilendiren self-hosted bir threat intelligence platformudur.

Neden yükseliyor · 14 günde 54 yıldız almış; bu, yeni bir repo için dikkat çekici bir başlangıç. Ancak yalnızca 3 commit ve 2 farklı yazar bilgisi var; yükselişin nedenini veya kullanıcı benimsemesini gösteren bağımsız kanıt mevcut değil.

Agent skill for producing threat models for open-source projects

TOTP codes in Chrome. Your secrets never leave your device. No host permissions.

dj - Dynamic JS File Extractor - intelligently detects dynamically loaded JavaScript files by statically analyzing website HTML and JS code

DPI-resistant SOCKS5/HTTP tunnel over TLS+WebSocket for self-hosted single-VPS setups

Offline pentest workflow tracker — turns nmap output into a port-aware, KB-matched recon checklist in under 30 seconds. Self-hosted, single

Hardening Linux automatisé avec Ansible — conformité ANSSI BP-028 (niveaux M/I/R/E). Durcissement système, réseau, SSH, utilisateurs + audit

The self-hosted token, certificate, license, and secret expiration manager with automated Certificate Lifecycle Management (CertOps) for tea

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

AI code quality toolkit — deterministic linter for the AI coding era. 22 detectors, GitHub Action PR gate, zero LLM required.

Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. Bui

WireGuard, AmneziaWG, Cisco AnyConnect and Tailscale in one native, free and open-source macOS VPN client: SwiftUI app, Network Extension, k

Zero-trust agentic AI platform. Supports SaaS and OnPrem (airgapped) deployments.

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segreg

使用大模型时，隐藏你的密码、token 等敏感信息。适配市面上各种工具，一键安装即可用。 / Hide passwords, tokens and secrets from the model. Works with everyday tools — one-click inst

AI coding agent skills for shipping, maintaining secure WordPress Sites

Security-hardened openclaw with auth gateway, AES-256 encryption and session management

ToolReplay, AI agent’ların tool-call transcript’lerini determinism, yinelenen çağrılar ve izin kapsamı açısından denetleyen bir Python CLI’dir.

Neden yükseliyor · AI agent’ların davranışını denetlenebilir ve tekrarlanabilir kılma ihtiyacına doğrudan hitap ediyor; README’de örnek girdi ve çıktıyla çalışan bir kullanım gösteriliyor. 13 günde 184 yıldız dikkat çekiyor, ancak son 28 günde 2 commit ve 1 farklı yazar bakım ve benimsenmenin sürdürülebilirliği için henüz zayıf kanıt.

Covert Coder — a local-first sovereign AI development environment for governed models, workflows, execution, evidence, and verification.

Zero-dependency TypeScript secret and PII redaction for any SDK, logs, HTTP, LLM prompts, and scoped MCP tool boundaries.

json-guard, JSON metnini JSON.parse öncesinde tarayarak boyut, iç içe geçme, anahtar ve string uzunluğu sınırları uygulayan bir TypeScript kütüphanesidir.

Neden yükseliyor · JSON kaynaklı hizmet engelleme riskini somut bir demo ve ölçümle anlatması dikkat çekmiş olabilir. Ancak 3 günlük yaş, 77 yıldız, 2 commit ve 1 farklı yazar verisi erken ilgiyi gösterir; benimsenme veya olgunluk kanıtı değildir.

Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys

Auditable, token-gated DeepSeek Harness remote gateway: mobile QR access, per-device sessions, Host/Origin rewrite, settings/credentials/dir

AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy,