Security

An AI-powered bug-bounty toolkit that runs reconnaissance, tests for vulnerabilities, validates findings against a strict gate, and writes a submission-ready report for platforms such as HackerOne, Bugcrowd, Intigriti or Immunefi.

• Security

A red-team adversary-simulation platform covering the phases of the MITRE ATT&CK framework, with a built-in LLM agent for automated processing and decision support.

• Security

An autonomous red-team agent platform, orchestrated with LangGraph, that runs reconnaissance, exploitation and reporting for authorized penetration-testing engagements.

• Security

A multi-agent offensive-security framework that turns an already-running AI coding agent into an automated tool for authorized penetration testing.

• Security

A Python toolkit that intercepts every AI agent tool call, message, and delegation in application code to enforce policy, identity, and sandboxing before it happens.

• AI evals
• Security

A C library implementing X.509 certificate handling and the TLS and DTLS protocols, with a small code footprint intended for embedded systems, plus a PSA Cryptography API implementation.

• Security
• Libraries

A Claude Code plugin marketplace from Trail of Bits providing security-research skills for smart contract auditing, code review, and other security analysis workflows.

• Agent skills
• Security

An AI-powered dark web OSINT tool that uses an LLM to refine search queries, filter results from dark web search engines, and produce an investigation summary.

• Security

An agent-powered vulnerability scanner that runs in a developer's own infrastructure, using top AI models at maximum thinking effort to find hard-to-spot security issues in large codebases.

• Security

An LLM vulnerability scanner that probes a model for hallucination, data leakage, prompt injection, misinformation, toxicity and jailbreaks, in the spirit of nmap or Metasploit but for language models.

• AI evals
• Security

A CLI and TypeScript SDK from OpenAI for defining security policy and finding, validating and fixing vulnerabilities in code, with containerized bulk scanning and a findings service.

• Security

An MCP server that lets AI agents such as Claude, GPT and Copilot autonomously run more than 150 cybersecurity tools for automated penetration testing, vulnerability discovery and bug-bounty work.

• MCP servers
• Security

An MCP server that bridges the IDA Pro disassembler with AI assistants, giving them tools to read and edit binaries for reverse engineering, though the author now recommends the official Hex-Rays MCP server instead.

• MCP servers
• Security

An autonomous penetration-testing agent that drives Claude Code or Codex through staged reconnaissance, exploitation and reporting phases for security assessments and capture-the-flag challenges.

• Security

A security scanner for AI agent skills used by Claude Code, Codex and other MCP-based tools, checking for prompt injection, data exfiltration, privilege escalation and other risks before a skill is installed.

• Security

A coding-agent skill that runs a structured, multi-phase security audit, using isolated agents for reconnaissance, hunting, candidate validation and independent verification, producing machine-readable findings.

• Agent skills
• Security

An autonomous multi-agent system for penetration testing that plans and runs security testing steps inside an isolated Docker sandbox, with specialist agents for research, development and infrastructure work.

• Security

A CLI and library for evaluating and red-teaming LLM-based applications, comparing model providers side by side and scanning for security vulnerabilities from the command line or CI/CD.

• AI evals
• Security

A command-line tool that scans git repositories, files and piped input for secrets such as passwords, API keys and tokens.

• Security

An open-source privileged access management platform that gives DevOps and IT teams a single, audited workspace for accessing SSH, RDP, Kubernetes, databases and other systems.

• Security
• Auth

An independent, community-built library of more than 800 structured cybersecurity skills for AI agents, each mapped to security frameworks such as MITRE ATT&CK and NIST CSF, for authorized testing, defense and education.

• Agent skills
• Security

An autonomous AI penetration tester that analyzes a web application's source code, finds attack paths, and runs real exploits to prove vulnerabilities before they reach production.

• Security

Strix runs autonomous AI agents that act like penetration testers: they exercise running code, find vulnerabilities, and validate each one with a working proof-of-concept exploit rather than a static-analysis guess.

• Security