Havuz

OneCLI, ekiplerin çalışan başına sandbox içinde çalışan AI agent’ları merkezi politika ve credential kontrolüyle yönetmesini sağlayan açık kaynak bir platformdur.

Neden yükseliyor · Ekiplerin agent’ları gerçek sistemlere bağlama ihtiyacına, sandbox ve merkezi credential/policy yönetimini bir araya getiren bir ürünle yanıt veriyor. 203 günde 3.517 yıldız dikkat çekici ilgi gösteriyor; ancak ilginin hangi kanaldan geldiği veya benimsenmenin ne ölçüde üretim kullanımına dönüştüğü verilen verilerden anlaşılmıyor. Son 28 gündeki 12 commit ve 4 farklı yazar, projenin aktif geliştirildiğine dair sınırlı ama olumlu kanıt.

Local privacy preflight for files, folders, and archives—catch secrets, PII, metadata, and hidden document content before sharing.

A terminal-first reverse engineering toolkit in Rust: PE/ELF/Mach-O analysis through CLI, TUI, and MCP. Installs as knife.

Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential con

Fast, self-contained vulnerability scanner (single Go binary) for web apps, APKs and binaries - extensible with JSON and nuclei YAML templat

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own mo

DevOps secrets base: lightweight, self-hosted secrets manager in a single file

一款安全又便捷的网页加密工具。采用 AES-256 + PBKDF2 百万次迭代 + HMAC 验签，密码与解密全程留在浏览器本地；一条命令或图形界面即可把 HTML（乃至整站 css/js/图片）加密成自解密页面，部署到任意静态托管。Secure, effortless HTM

Catch .env secrets leaking into git: a pre-commit hook and CLI that fails when an API key or any value of your env files is staged, tracked

A privacy-first, local-first password manager with cross-platform synchronization.

Rust 跨平台应急响应分析工具，提供 CLI 与桌面 GUI；支持日志、进程和离线流量分析、案件项目管理、IOC 匹配、AI 辅助分析、报告导出及 Windows/Linux 应急命令速查。支持 Windows、Linux、macOS ARM64。

Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.

Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see y

Audit and fix your Mac's security in one command. No agent, no signup, open source.

Audits AUR PKGBUILD updates before you install: detects structural changes, suspicious commands, typosquatting, and novelty signals, then pr

Fast, cross-platform CLI for finding secrets and sensitive data across filesystems, SMB, Active Directory, Microsoft 365, Slack, Jira and Co

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

OSINT tool for precise version fingerprinting of open-source web software

A small multithreaded TCP port scanner in plain C (POSIX sockets + pthreads), zero dependencies.

Scan, fuzz, and assess OT protocols from one CLI.

C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel

A Linux CLI utility that transparently routes all system traffic through the Tor network using nftables. It enables rapid IP rotation and ea

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process with

Detect abandoned and end-of-life dependencies that CVE-based scanners don't flag, and rank which ones to remove first.

A BOLA/IDOR access-control confirmation engine — code adjudicates every verdict, not just the model, with a reproducible evidence chain.

Local-first Python CLI for safer log sharing: redact secrets, tokens, emails, and local paths before posting to GitHub issues, tickets, or A

NEXUS REDFOX — Local-first code intelligence and security analysis platform for developers and security researchers.

xnew is a fast, low-memory CLI that appends only unique lines to files. Built in Go for large datasets, it streams input efficiently and sca

Passive attack-surface scanner: turn a domain into a risk grade, copy-paste fixes, and a client-ready report. Safe DNS, HTTP, TLS, email, an

Local-first security for developers and their AI coding agents. Finds risky agent settings (hooks, auto-approve, unpinned MCP servers), API

Finds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.

NSAuditor AI Community — open-source network security scanner. 27 discovery plugins, structured findings, SARIF/CSV output, MCP integration,

Zero-dependency Python CLI for deep security auditing of FortiGate configurations. 5695 lines, 35 audit domains, 300+ checks — firewall poli

Defensive OSINT exposure checker: see what an email, password, domain or username leaks in public breach data. No API keys. CLI + local web

Reproducible artifact manifests, sandbox-output verification, and evidence-bundle validation for artifact-heavy workflows.