Security

A command-line installer that adds security-review skills and slash commands to AI coding assistants such as Claude, Cursor and Copilot, covering the OWASP Top 10 and CWE Top 25 categories.

• Agent skills
• Security

An agent skill that gives an AI assistant deepfake detection and media-forensics abilities, analyzing audio, images, video and text for signs of AI generation through Resemble AI's APIs.

• Agent skills
• Security

A permission-request hook for AI coding tools that hands each tool-execution approval decision to a language model, judged against rules written in a configuration file, with working defaults out of the box.

• AI evals
• Security

A governance framework and set of documents that help organizations decide whether to allow a given MCP server, classify its risk and set the right controls before adopting it.

• MCP servers
• Security

A knowledge base of digital forensics investigation techniques, modeled on MITRE ATT&CK, cataloging each technique's objective, ways it can go wrong and mitigations for those weaknesses.

• Security

An open-source CLI and GitHub Action that statically reviews what a pull request changed about an AI agent's tool permissions and capabilities, before that change merges.

• Security
• CI/CD

Example scripts in Python and JavaScript that call Limina's REST API to find personally identifiable information in text and replace it with redaction markers, hashes, tokens or synthetic values.

• Security
• APIs

A proof-of-concept Model Context Protocol bridge that lets an LLM query a Velociraptor digital-forensics deployment in natural language, such as checking a named machine for suspicious processes.

• MCP servers
• Security

An AI-powered, multi-agent security auditor for Symfony applications that runs an adversarial attacker-versus-reviewer loop to find application-level vulnerabilities that static analysis tools miss.

• Code quality
• Security

A self-paced, sixteen-week course that takes a learner from a first Windows Server logon through building, attacking and hardening a full enterprise Windows environment on a lab domain.

• Security
• Tutorials

A local AI research agent that answers questions through Ollama by combining web search, open-source intelligence lookups and multi-hop retrieval-augmented reasoning.

• RAG
• Security

A local governance daemon for AI agents that enforces declarative tool-call policies deterministically before each call runs, with identity-bound credentials and a tamper-evident audit log.

• AI evals
• Security

A mobile runtime detection workbench for iOS and Android that runs Frida-based hooks and shell tools inside a host app sandbox, and lets an AI work in the same sessions through MCP.

• Debugging
• Security

A command-line security scanner that discovers exposed MCP servers, A2A agent cards, and open LLM inference APIs across a network in a single scan.

• Security

A four-layer DevSecOps framework that wires automated security scanning into CI/CD pipelines as a build gate, alongside multi-track deployment and AI-assisted merge-conflict resolution.

• Security
• CI/CD

A security checklist and scanner for AI-generated web apps, combining an AI rules file, an automated external scan, and an AI-run audit prompt with a manual checklist.

• Security

A secure CLI proxy that sits between AI agents and external APIs, running human-written HCL request templates so a model never sees the URL, auth header, or secret it is calling.

• LLM gateways
• Security

A zero-trust sandbox framework that limits which files and commit history an AI coding model can see per session, logging every prompt, response, and data transfer.

• Security
• Containers

An independent, audited fork of the ZCode AI coding client that removes all monitoring and telemetry and builds transparently from its own source.

• Coding agents
• Security

A kernel-enforced sandbox for AI coding agents that wraps tools such as GitHub Copilot CLI, Claude Code or Gemini CLI so the agent can write code but is blocked from reading SSH keys, pushing to the default branch or exfiltrating secrets.

• Security
• Containers

A set of seven standalone Claude Code hooks, plus an enforce-hooks component, that block dangerous shell commands and other tool calls Claude Code's own permission system can miss, backed by over 1,900 tests and a corpus of known permission gaps.

• Agent skills
• Security

A Model Context Protocol server that lets an AI assistant query Socket's dependency security scores to check a package, audit a package.json or identify risky dependencies across npm, PyPI, Cargo and other ecosystems, hosted or self-run locally.

• MCP servers
• Security

A Windows tool for red-team engagements that searches a host's filesystem, services and scheduled tasks for .NET assemblies that could serve as payloads or be used in post-exploitation.

• Security

A reference architecture for running a council of AI coding agents such as Claude, OpenCode and Crush across one codebase with work-queue delegation, automated PR review and hardened CI, alongside research packages for sleeper-agent detection.

• Agent frameworks
• Security