Security

A daily email and dashboard tracking software releases, security advisories, outages and breaking changes across the vendors and repositories a team depends on, surfacing only what needs action rather than a full news feed.

• Security
• Monitoring

A rootless Linux sandbox for developers, built on user namespaces with optional gVisor isolation, that confines coding agents and third-party packages without leaving your normal work environment.

• Security
• Containers

A free, searchable directory that tracks the security and compliance certifications, such as SOC 2, ISO 27001, HIPAA, and GDPR, of over 400 SaaS vendors across twenty categories, with side-by-side comparisons.

• Security
• Curated lists

A browser-based, downloadable HTML utility that encrypts and decrypts files as a single self-contained, self-decrypting HTML page, usable entirely offline.

• Security

A tool that gives AI agents temporary, auditable access to a machine, replacing standing SSH keys with session-scoped permissions and full audit logs.

• Security
• Auth

A co-evolutionary adversarial red-teaming tool for AI agents that uses quality-diversity evolutionary search to autonomously breed edge-case scenarios, testing whether an agent with tool access can be made to hallucinate, deadlock or leak funds.

• AI evals
• Security

An open-source contrastive-embedding pipeline that maps technical CVE vulnerability descriptions to formal cybersecurity compliance controls in NIST SP 800-53 and CMMC, published with its model generation, fine-tuning and evaluation code.

• Models
• Security

A confirmed, bounty-awarded write-up of a Proton Mail vulnerability that lets an attacker present a forged sender identity indistinguishable from a real one in the web interface.

• Security

A local, reproducible sandbox for testing whether an implementation of signed, default-deny authorization correctly refuses actions that a signed manifest does not explicitly allow, built for researchers to attempt an authorization bypass.

• Security

An open framework for governed AI development that redacts personal data, blocks prompt injection, audits agent tool calls, and tracks EU AI Act compliance, installed as a proxy or a small Python SDK.

• AI evals
• Security

A terminal-first security audit toolkit that orchestrates 13 scanners across code repositories, container images, infrastructure-as-code, web apps and Kubernetes, with unified reporting.

• Security

An offline AI agent security and governance scanner that checks a codebase and its installed agents against 80 deterministic rules, with no LLM involved in the evaluation.

• AI evals
• Security

A local privacy layer for Arabic and Gulf text that finds personal data such as names, national IDs, IBANs and phone numbers, replaces each value with a reversible token before it reaches an AI model, and restores the real values locally when the reply comes back.

• Security

A set of deliberately vulnerable machines, grouped by the skill each one exercises, for practicing web application security testing.

• Security

A single static binary that discovers every skill, MCP server, plugin, hook and rule installed across a machine's AI coding tools, hashes them into a lockfile, statically scans them, and detects post-audit modification before it can cause harm.

• Security

An autonomous penetration-testing MCP server with an integrated AI decision engine, designed to run on a Raspberry Pi running Kali Linux ARM64 and chain pentest tools with minimal LLM calls.

• Security

A GitHub Action that scans pull requests for AI-agent governance gaps, missing audit trails, policy enforcement and human oversight, and posts a compliance report mapped to the EU AI Act, DORA and ISO 42001.

• Security
• CI/CD

An autonomous AI agent that runs a senior-analyst-style forensic investigation loop on top of the SANS SIFT Workstation, restricted to a fixed set of read-only forensic tools, and produces an auditable, traceable incident report.

• Security

A local web dashboard for reconnaissance and security testing of MCP endpoints, discovering exposed resources, tools and prompts and probing them for vulnerabilities such as injection, SSRF and path traversal.

• Security

An open-source security gateway that sits between an MCP client and server, screening every tool call through a multi-stage pipeline of rate limiting, injection detection, SSRF and egress control, policy enforcement and dangerous-chain detection.

• MCP servers
• Security

A runtime governance proxy that sits between an AI agent and its model API, detecting and blocking prompt injection and instruction-authority transfer from web pages, emails, documents and tool output before the agent acts on it.

• AI evals
• Security

An autonomous web crawler and attack-surface-management engine for security testing, mapping endpoints, parameters and security issues across traditional and single-page web apps.

• Security

A research malware triage framework built around the Model Context Protocol that combines static analysis, reverse engineering, threat-intelligence lookups, optional sandbox detonation, SHAP-based explainability and a multi-agent reporting pipeline, focused on Windows PE files.

• Security

An ML-augmented successor to Snaffler that ranks files on SMB shares by likelihood of containing credentials, using a LightGBM path classifier and an optional Qwen3 content classifier to confirm flagged files.

• Security