Security

A compliance and security scanning tool for AI applications, built around Chinese regulations, scanning a project in one command for foreign model endpoints, hardcoded keys and exposed personal data, with runtime interception of prompt injection.

• Security

An MCP server that gives Claude Code an entire malware-analysis lab of over 300 tools, covering decompilation, symbolic execution, interactive debugging, YARA and capa signatures, emulation and .NET, Go and Rust analysis, driven from natural-language prompts.

• MCP servers
• Security

An autonomous system that pairs coverage-guided fuzzing with LLM agents to find, verify and patch vulnerabilities in open-source projects, built on the OSS-Fuzz toolchain.

• Testing
• Security

An open-source confidential-computing platform for ARM devices that protects data being processed on-device using ARMv9's Confidential Compute Architecture.

• Security

A curated list of resources for LLM security operations, covering architecture risks, vulnerabilities, jailbreaks, RAG security, defensive tools, threat modeling, datasets and research.

• Security
• Curated lists

An AI agent add-on that inspects a project in any programming language to understand what it does, then walks the developer through the security work relevant to that specific system.

• Security

A curated collection of Google dorks, Shodan and Censys queries, GitHub dorks and Sigma rules for finding exposed AI infrastructure on the internet, aimed at red-team operators, penetration testers and OSINT researchers.

• Security
• Curated lists

A local, self-hosted security operations center that ingests Wazuh-format events, triages them with a local LLM, retrieves security knowledge for context, correlates incidents, and exports Sigma detection rules.

• Security

An enterprise gateway that sits between a team's chat channels and the AI agents acting on their behalf, keeping credentials out of the model's reach and logging every action to a signed, tamper-evident audit trail.

• Security

A local, whitebox vulnerability-research pipeline that builds a call graph across a codebase, enumerates every path from untrusted input to a dangerous operation, and uses a code-specialized LLM to judge which paths are exploitable.

• Security

A bilingual cybersecurity knowledge base for security researchers, service engineers, CTF players, and red-team learners, covering web and blockchain security, CTF, and incident response.

• Security

A CI-native security scanner for MCP servers that simulates attacks, detects schema drift, and produces a health score and compliance evidence before other agents come to depend on the server.

• MCP servers
• Security

A curated set of 88 Microsoft security skills for AI coding assistants, covering Defender, Sentinel, Entra, and Purview, so an agent gives grounded, product-specific guidance instead of generic advice.

• Agent skills
• Security

A Burp Suite Professional extension with an embedded MCP server that exposes 150 tools for proxy analysis, active scanning, fuzzing, race-condition testing and guided exploitation to an AI agent such as Claude Code.

• MCP servers
• Security

A documented top-ten list of security risks specific to autonomous AI agent systems, such as authorization hijacking, memory manipulation and multi-agent orchestration exploitation, with mitigation strategies for each.

• Security
• Books

An offline cybersecurity knowledge base of cheatsheets covering secure development, secure administration, pentesting, forensics, and radio frequencies, paired with a deliberately vulnerable practice app.

• Security

An open-source red-teaming and evaluation framework for AI agents that fires 300 curated adversarial prompts across an OWASP-inspired ten-category agent-security taxonomy at any HTTP endpoint or Python callable, scoring responses without further LLM calls.

• AI evals
• Security

A Python framework for evaluating safety risks in multi-agent systems, wrapping an existing MAS to run structured checks across 20 risk types such as prompt injection, tool misuse, and sandbox escape, and producing evidence-backed safety reports.

• AI evals
• Security

A reference monitor for AI coding agents that intercepts every shell command, file operation, and web request through Rust hook binaries and Cedar policies, blocking exfiltration and destructive actions across Claude Code, Cursor, Copilot, and other agent tools.

• Agent skills
• Security

Course materials covering chat models, prompt engineering, prompt chaining, retrieval-augmented generation, and agentic workflows applied to cybersecurity operations, with runnable Python examples for each topic.

• Security
• Tutorials

An OpenClaw skill and standalone tool that gives AI agents access to the Tor network and onion services, built on a dark-web search engine and OSINT pipeline for threat-intelligence and security research.

• Agent skills
• Security

A static security scanner for AI agent code that checks for prompt injection paths, unsafe tool inputs reaching subprocess or eval calls, and MCP configuration mistakes, mapped to the OWASP Agentic Top 10.

• Code quality
• Security

An open-source, agentic security operations center with specialized AI agents for tasks such as triage, plain-text playbooks for multi-agent workflows, and over 7,000 community detection rules, running against a locally hosted or remote LLM of the user's choice.

• Security
• Monitoring

A TypeScript framework for building MCP servers that enforces security at the architecture level, filtering all data through a typed egress layer before it reaches the model and removing tools from the agent's namespace when workflow state forbids them.

• MCP servers
• Security