Havuz

Finds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.

Deterministic security analysis for Stellar Soroban smart contracts and Rust projects.

A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.

FSharp refactoring tool - The tool clarifies the (agent-generated or old) code's intent, reduces non-alphanumeric noise, and uses built-in .

Free open-source toolkit to understand, audit and rescue vibe-coded or legacy codebases: source-linked maps, team handoff, human-approved fi

路由器品牌插件！[BroTech] Router enhancement script for Xiaomi, ASUS, HUAWEI & TP-Link. Built for network geeks! Rebuilds dashboards with high-preci

Rust-native, multi-session headless IDA Pro MCP server with isolated workers and stdio or Streamable HTTP transports.

Static ROS 2 architecture analysis, visualization, auditing, and CI policy enforcement for Python and C++ workspaces.

Contract intelligence, inspection, interface analysis, compatibility, deployment verification, and reproducibility tooling for Stellar and S

MIT-licensed code knowledge graph: index any source repo into a queryable graph of symbols, call chains and blast radius — with wiki generat

A living architecture map for any codebase, any language, any coding agent. See what every change does to the structure, and stop it crossin

Static, no-execution security checks for Hermes Agent plugins

Static security & correctness linter for Payload CMS. Zero-config, deterministic, ts-morph-based. Catches access-control gaps, unsafe Local

Gradual effect, contract, async-safety, and temporal checking for existing TypeScript.

Multi-language cognitive complexity linter, as a single static binary

零依赖的本地 APK/AAR/DEX 结构索引 + MCP Server。17 个工具，为 Xposed 模块开发提供静态反查。

企业自托管 AI Code Review Agent ，一键自动分析 GitLab MR 与 Push，并回填总评和行内 Discussion。

Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero te

Safely run untrusted repos (fake-interview malware, infostealers, RATs) in a locked-down, ephemeral container. No host secrets reachable, ne

Fast iOS decompiler & Mach-O disassembler in Rust — arm64, Objective-C class-dump, Swift metadata, and a native desktop GUI. Reads .ipa/App

Deterministic security analysis for agent skill files.

Local code-intelligence pipeline for AI coding agents: architecture maps, hotspots, change impact, and structural regression gates before th

Deterministic Git & AST change intelligence engine and Model Context Protocol (MCP) server. Detects breaking changes, maps caller blast radi

Catch EU regulatory violations at PR time — GDPR, EU AI Act, NIS2, DORA, CRA, DSA, DMA and the Data Act. Runs entirely on your machine or CI

Structural code intelligence for DeepSeek Harness (dsh) — gives the agent codegraph and codegraph_index tools to find where a symbol is decl

Local AI security reviews with evidence, severity, and a review UI.

🩺 Zero-intrusion runtime diagnostic and architectural analyzer for Spring Boot. Automatically detects cyclic dependencies, proxy overheads,

Agent-ready CLI for static page inspection, search triage, and browser handoff.

Measures how much code AI coding agents add, from patches benchmarks already publish

Nephilex is an open-source AI Security Engineer that analyzes repositories, detects vulnerabilities, validates risks, explains findings, gen

Succeeded by SAUR: [https://github.com/PicasoTheDeal/SAUR](https://github.com/PicasoTheDeal/SAUR)

Zero-G Reverse Engineering Anything & Verified Safe Rust Reconstruction for Gemini 4 Argon + Google Antigravity 2.0 (4-Mount Recon Kits, Who

Deterministic code-graph (GraphRAG) over your repo for LLM agents — local-first, git-native, zero-infra, served via MCP. Python, TS/JS, Rust

Pi extension that brings Fallow codebase intelligence into Pi as an agent tool and slash command.

NEXUS REDFOX — Local-first code intelligence and security analysis platform for developers and security researchers.

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers i

Local-first repository context for coding agents: codegraph, cited project knowledge, change impact, and evidence-backed workflows.

Obsidian Graph View, but for source code — scan a JS/TS, HTML/CSS, Python, Ruby, Rust or Shopify Liquid project into a dependency graph and

Normalize Tailwinds. A zero-config CLI and GitHub Action that finds bloated Tailwind utility classes and rewrites them into their short, can

Static secret scanner for source trees — regex rules, entropy scoring, and SARIF output for CI pipelines.

AI-powered vulnerability triage platform for Python projects. KIRTA combines SBOM, SCA, static code analysis, call maps, and AI explanations

Spring Boot + MyBatis 框架感知代码地图：静态分析调用链/SQL/事务/实体影响面，通过 MCP 喂给 AI 编程工具（Trae/Cursor/Claude Code），省 token、防幻觉

Static file analyzer for malware triage — hashing, binary headers, entropy, signature rules, and IOC matching.

Reproducible research on the persistence and recurrence of security misconfigurations in public Terraform repositories.

Runtime feature research for Black Desert x64: FOV unlock, render-scale supersampling (up to 400%), actor chams, and gathering ESP. Source,

An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analys

The deterministic merge gate for AI-generated agent capability changes — a local-first, static Tool-Use Readiness review for MCP, OpenAPI, a

Local static analysis and baseline-governed CI checks for coding-agent instructions: AGENTS.md, CLAUDE.md, Cursor, Copilot, and Gemini.

Security scanner for MCP servers, source trees, and packages, with explicit findings and coverage reporting.