Security

A reproducible security evaluation workflow for generative AI, with one product testing an LLM or API's behavior under adversarial scenarios and a second extending that evaluation to a running agent's tool calls and file changes.

• AI evals
• Security

A local-first document redaction workbench that finds and anonymizes sensitive information in PDFs, scans, Office files, images and text using local LLMs and vision-language models.

• Security
• Data engineering

A knowledge base documenting known Microsoft Configuration Manager attack techniques alongside matching defensive and hardening guidance, for red teamers and defenders.

• Security

An open-source AI reverse-engineering platform and MCP server that pairs Ghidra, Frida, x64dbg, and Rizin with a runnable knowledge base for binary analysis, CTF and malware research.

• MCP servers
• Security

An official Burp Suite extension that exposes Burp's capabilities to AI clients over the Model Context Protocol, so an MCP-aware assistant can drive Burp Suite directly.

• MCP servers
• Security

An open-source, agent-centric security operations platform that lets AI agents triage alerts, investigate cases, and enrich threat intelligence alongside human analysts.

• Security

A multi-agent security platform that automates finding, verifying and reporting CVEs in a project's source code, from importing a repository through to a ready-to-submit CVE report.

• Security

The legacy repository for OWASP's Top 10 list of security risks in large language model applications, kept as a historical archive now that active development has moved to a successor repository.

• Security

A continuously updated, curated index of research papers, projects and agent skills on using large language models to detect software vulnerabilities, spanning function-level, repository-level, agentic and smart-contract detection.

• Security
• Curated lists

A self-hostable OSINT tool for investigating email addresses across breach databases, social networks, DNS records and the open web, producing an exposure score and structured findings.

• Security

An open-source, browser-based AI agent that runs penetration testing tools autonomously against a connected Kali attack box, reading results and deciding its own next steps.

• Security

A Burp Suite extension that integrates AI into a security testing workflow, adding built-in MCP tooling, AI-assisted analysis, and AI-driven passive and active vulnerability scanning alongside manual testing.

• Security

A curated list of open-source, research and commercial tools for AI security and AI-assisted cybersecurity, covering autotriage, agent security, AI-powered pentesting, red-teaming and more.

• Security
• Curated lists

A pre-execution guard that blocks destructive Git and filesystem commands and access to secrets such as SSH keys before a coding agent's tool call actually runs.

• Coding agents
• Security

An enterprise security system, deployed in production at Uber, that discovers, observes, benchmarks and detects risky behavior in employee-facing and customer-facing AI agents.

• Security

A production-grade MCP server giving an AI model twenty-eight security-intelligence tools across two dozen sources, including NVD, EPSS, CISA KEV, Shodan and VirusTotal, correlated behind one call.

• MCP servers
• Security

A curated academic collection of jailbreak attack and defense research on large and vision-language models, with papers, code, datasets and evaluations.

• Security
• Curated lists

An AI-powered OSINT agent for authorized security research, with twenty investigation tools behind a natural-language interface and an MCP server so any compatible AI client can drive them.

• Security

An AI-assisted penetration-testing workflow that investigates a target application, then uses machine oracles to verify whether a found exploit actually reproduces before reporting it.

• Security

A Google toolkit of skills and an ADK harness that let AI coding agents autonomously find, reproduce and patch vulnerabilities in a codebase, with human review built into the process.

• Agent skills
• Security

A penetration-testing tool that uses a large language model to identify login-form fields on a target page, then runs multi-threaded brute-force or password-spray attacks against it.

• Security

A systematic literature review indexing more than 861 papers on large language models applied to cybersecurity, organized around domain-specific LLMs, defensive and offensive applications, and future research directions.

• Security
• Papers

An operational handbook and knowledge base for building, running and maturing a Security Operations Center or CSIRT, covering detection engineering, threat intelligence, SOC metrics, automation and incident-response playbooks.

• Security
• Curated lists

A curated set of continuously updated detection lists and threat-hunting resources for SOC, CERT and CTI teams, covering suspicious domains, ASNs, TLDs, Windows services, named pipes, user agents and other indicators of compromise.

• Security
• Curated lists