Security

Workshop materials teaching security practitioners how to write, refine and verify prompts for real security tasks, including a hands-on prompt-injection challenge and packaging prompts into reusable Modelfiles.

• Security
• Tutorials

An open protocol and TypeScript reference stack that authorizes and logs AI agent actions with real-world consequences, using Ed25519 capability tokens, tiered human-approval rules and a tamper-evident, hash-chained evidence log.

• Security
• Auth

An open-source governance layer that intercepts AI agent tool calls and checks them against African financial and data-protection regulations before they execute, with adapters for LangChain, LangGraph, CrewAI and AutoGen.

• AI evals
• Security

A security and reliability layer for AI agent tool calls that intercepts MCP and other tool traffic through a seven-layer interceptor, flags prompt injection and schema drift, and runs automated fuzz tests against an agent's tools in CI.

• AI evals
• Security

A policy and approval layer that intercepts AI agent tool calls, checks them against configured rules, and holds risky actions for human review before they execute, with integrations for MCP, LangChain, OpenAI Agents and Claude Agent SDK.

• AI evals
• Security

A policy-and-trust layer that turns declarative YAML configs into Model Context Protocol tool servers with trust-tier enforcement, credential brokering, and tamper-evident audit logging built in.

• MCP servers
• Security

A self-evolving AI security research platform that publishes code-fix tasks through a honeypot, evaluates submitted fixes in a Docker sandbox with cheat detection, and exports the results as training data for LoRA fine-tuning.

• AI evals
• Security

A curated list of tools for exploring the dark web: search engines, onion-link directories, onion scanners, dark-web crawlers and cyber threat intelligence resources, linking out to each individual tool's own repository.

• Security
• Curated lists

A typed, auditable Rust database runtime and query builder built for AI coding agents, enforcing agent identity, declared intent, and redacted diagnostic logging around every database operation.

• Security
• Databases

A dual-mode, LangGraph-based security platform: a red-team agent that chains reconnaissance, exploitation, and reporting with terminal-verified exploits, and a blue-team agent that monitors live HTTP traffic and responds with deception, blocking, or patching.

• Security

A hardened Docker-in-Docker sandboxing environment, using gVisor kernel virtualization and a zero-trust Layer 7 proxy, for running untrusted coding agents such as Claude Code, Codex, Gemini CLI and OpenCode safely.

• Security
• Containers

An MCP server that lets an AI assistant drive Frida for Android dynamic analysis and reverse engineering, automating instrumentation on a rooted device.

• MCP servers
• Security

A native zero-trust overlay network for agent-to-agent communication, built on OpenZiti, giving agents the identity, discovery, policy and connectivity to interact safely.

• Security
• Networking

A BloodHound-style risk-analysis tool for multi-agent AI architectures that finds reachable attack paths from untrusted input to sensitive data or external actions.

• Security

A long-running, self-evolving vulnerability-discovery harness that wraps any strong coding model in a structured recon-hunt-validate pipeline for security research.

• Security

A stateful intrusion prevention system that reassembles TCP packet streams in order and uses deep-learning models to detect and block malware split across packets.

• Security

A framework that routes AI agent-to-agent messages through a verifier proxy which authenticates, encrypts and logs every message for later audit.

• Agent frameworks
• Security

A local-first production evidence gate that scans a repository for security, correctness, scale and performance issues without executing its code.

• Code quality
• Security

A static security scanner that grades MCP tool definitions A through F for risks such as prompt injection, data exfiltration, privilege escalation, and supply-chain backdoors, before an agent is allowed to call them.

• MCP servers
• Security

A reference implementation of a permission-aware Agentic RAG system for enterprise document knowledge bases, enforcing folder-level access control through every step of retrieval, reranking, and citation.

• RAG
• Security

An open-source, AI-assisted network security scanner that runs 27 plugins to find and prioritize vulnerabilities, map them to CVEs and MITRE ATT&CK, and track changes across scans, entirely on the user's own machine.

• Security

A local, single-user permission gateway that lets AI assistants operate developer-owned systems through scoped, credentialed connector actions instead of handing over raw credentials.

• MCP servers
• Security

A constitutional governance runtime for autonomous AI agents that enforces defined rules, verified agent identities, and bounded permissions, working with any agent framework and halting or escalating automatically on a violation.

• AI evals
• Security

A deterministic AI defense framework that filters and validates inputs and outputs for an autonomous agent, combining keyword and pattern detection, a self-learning adaptive ruleset, and optional multi-model cryptographic consensus for high-assurance verdicts.

• AI evals
• Security