Havuz

AI-first external attack surface assessment with continuous discovery, evidence-based vulnerability validation, and developer-agent MCP inte

open·kritt, AI agents kullanarak kod depolarındaki olası güvenlik açıklarını tarayan, doğrulamaya ve önceliklendirmeye yönelik self-hosted bir platformdur.

Neden yükseliyor · 69 günde 2171 yıldız alması dikkat çekici erken ilgiye işaret ediyor; son 28 günde 27 commit ve 5 farklı yazar da projenin aktif geliştirildiğini gösteriyor. Ancak yıldızlar ve README'deki iddialar, taramaların gerçek açık bulma başarısını veya yanlış pozitif oranını kanıtlamıyor.

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay y

Local security intelligence for CVE triage - 40 data sources and 41 tools, risk scores and an MCP server for AI agents, all in native Rust.

0, tarayıcı, terminal ve MCP üzerinden güvenlik iş akışları çalıştırıp bulguları iş etkisine göre önceliklendiren açık kaynak bir güvenlik platformudur.

Neden yükseliyor · 46 günde 492 yıldız ve son 28 günde 677 commit dikkat çekici bir ivmeye işaret ediyor; YC desteği ve browser, CLI, MCP birleşimi de görünürlüğü artırabilir. Ancak commitlerin tek farklı yazardan gelmesi, hareketliliğin geniş topluluk katkısı anlamına gelmediğini gösteriyor.

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own mo

Modern attack-surface reconnaissance & asset monitoring platform — rebuilt from classic ARL with async decoupled scheduling, enterprise asse

给 AI 生成代码做安全审阅的终端工具：410 条漏洞清单，20 条本地规则 + 模型逐条判定（带证据核实），看完 diff 再决定要不要写（Rust）

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

Security scanner for MCP servers, source trees, and packages, with explicit findings and coverage reporting.

Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS

Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault,

基于多智能体架构与自主决策机制，配合大语言模型的理解能力，输入自然语言指令，AI 自动完成从目标侦察到漏洞验证的完整渗透测试流程。

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PH

open-source pentest management built to be operated by an AI agent

Open-source CPG-based interprocedural taint analysis + LLM triage, with a Ghidra-style audit workbench. Runs fully offline.

AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy,

Vulnerability scanning with your own scanners and threat feeds, plus a coding agent that opens the fix PR. CLI, GitHub Action, or scheduled

Elevate your AI assistants (like Claude & Cursor) into autonomous cybersecurity experts. Pentester-MCP integrates 200+ pentesting tools via

Dark-GPT: The ultimate unrestricted AI assistant for cybersecurity research by M4TH4CK3R

Hands-off supply-chain watchdog for dev machines: orchestrates multiple security scanners (Perplexity bumblebee + osv-scanner, govulncheck,

AI agent benchmark hackability scanner — find evaluation vulnerabilities before they undermine your results

Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

Autonomous AI-powered penetration testing platform. LLM-driven recon, vulnerability analysis, and exploit validation for internal & external

TriLane: autonomous AI pentester and multi-agent security auditor for authorized gray-box testing of web apps and APIs. Built with Rust and

Trust & security scanner for AI agents and MCP servers — OWASP-mapped findings, Trust Cards (A–F grades), SARIF + CI gate. Free CLI, zero te

Sandboxed multi-scanner security for AI skills, MCP servers, and package trees — coverage honesty, SIE judging, heatmap posture, guided tria

NSAuditor AI Community — open-source network security scanner. 27 discovery plugins, structured findings, SARIF/CSV output, MCP integration,

Offensive web security scanner — OWASP Top 10 · MCP server · CLI · Go

Autonomous web-app pentest engine — a multi-agent pipeline wielding 30+ offensive-security tools as skills, PoC-validated findings. Built on

60+ detectors for web, plus mobile apps and smart contracts. Every finding is mapped to the OWASP Top 10, marked Confirmed when we have proo