Havuz

0, tarayıcı, terminal ve MCP üzerinden güvenlik iş akışları çalıştırıp bulguları iş etkisine göre önceliklendiren açık kaynak bir güvenlik platformudur.

Neden yükseliyor · 46 günde 492 yıldız ve son 28 günde 677 commit dikkat çekici bir ivmeye işaret ediyor; YC desteği ve browser, CLI, MCP birleşimi de görünürlüğü artırabilir. Ancak commitlerin tek farklı yazardan gelmesi, hareketliliğin geniş topluluk katkısı anlamına gelmediğini gösteriyor.

open·kritt, AI agents kullanarak kod depolarındaki olası güvenlik açıklarını tarayan, doğrulamaya ve önceliklendirmeye yönelik self-hosted bir platformdur.

Neden yükseliyor · 69 günde 2171 yıldız alması dikkat çekici erken ilgiye işaret ediyor; son 28 günde 27 commit ve 5 farklı yazar da projenin aktif geliştirildiğini gösteriyor. Ancak yıldızlar ve README'deki iddialar, taramaların gerçek açık bulma başarısını veya yanlış pozitif oranını kanıtlamıyor.

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay y

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

Modern attack-surface reconnaissance & asset monitoring platform — rebuilt from classic ARL with async decoupled scheduling, enterprise asse

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own mo

A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum au

Is your lockfile pwned? 5-second scan of npm/PyPI/Maven/Cargo/Go/RubyGems lockfiles for compromised packages — OSV + curated campaign feed,

Self-hosted bug-bounty platform — verification-first recon & DAST, continuous monitoring. Your data stays on your machine.

Security testing that runs inside the coding agent you already use. Source-available, not open source.

Autonomous multi-agent pentest framework — plans, exploits, verifies (proof-required), CVSS-scores and writes client-ready reports. 104/104

Autonomous Bug Bounty Hunting Framework powered by Claude Code. 20 AI agents, state-machine orchestration, Burp Suite MCP, credential vault,

AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PH

Cache Commander — a TUI and MCP server to explore, audit, and clean developer cache directories. Scan for CVEs, find outdated packages, recl

Elevate your AI assistants (like Claude & Cursor) into autonomous cybersecurity experts. Pentester-MCP integrates 200+ pentesting tools via

AI agent benchmark hackability scanner — find evaluation vulnerabilities before they undermine your results

AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy,

Autonomous AI-powered penetration testing platform. LLM-driven recon, vulnerability analysis, and exploit validation for internal & external

OSINT tool for precise version fingerprinting of open-source web software

Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

Self-hosted CVE triage for your root servers: Trivy scans, LLM-judged exploitability, only the findings that matter.

open-source pentest management built to be operated by an AI agent

Automated CLI security auditor for web configuration vulnerabilities.

Vulnerability scanning with your own scanners and threat feeds, plus a coding agent that opens the fix PR. CLI, GitHub Action, or scheduled