Security

A desktop app that proxies MCP tool call traffic between AI apps such as Cursor, Claude, VS Code and Windsurf and their MCP servers, checking each request and response against a set of signatures and asking the user before allowing anything it flags as harmful.

• AI evals
• Security

A free security-scanning skill for Claude Code, Codex, and Antigravity that traces data flow through AI-written code to find and explain 21 common vulnerability types.

• Code quality
• Security

A directory-visualization command-line tool, written in Rust, built for AI context: compressed output for feeding into a model, semantic search, symbol-aware editing, and a scanner for supply-chain attacks on MCP integrations.

• CLI tools
• Security

An autonomous security-operations-center agent that watches OpenSearch or Elasticsearch log data, builds a retrieval-augmented memory of normal behavior, and uses a large language model to validate whether a detected anomaly is a real threat.

• Security
• Monitoring

An open knowledge base cataloging cybercriminal concealment tactics, techniques, and procedures, built from over 200 clear- and dark-web OpSec guides using a MITRE ATT&CK-style structure.

• Security

A self-hosted platform that runs real security scanners such as Nmap, Nikto and SQLMap inside a Docker sandbox and uses a locally or remotely run AI model to analyze the results, rather than only suggesting commands.

• Security

An endpoint-detection-and-response system built for AI agents that evaluates an agent's file access, process execution and network activity against the same policy engine as ordinary endpoint events, denying anything a policy does not explicitly allow.

• AI evals
• Security

A policy engine that intercepts an AI agent's destructive or expensive tool calls, routes them to a human for remote approval, and records every decision in a signed ledger.

• AI evals
• Security

PCILeech Firmware Generator extracts a real PCIe device's configuration over VFIO from donor hardware and uses it to generate unique PCILeech FPGA DMA firmware through a 3-stage host-container-host build pipeline.

• Security

DeepSec is an AI security platform combining Shield, a code auditor that flags hallucinated packages, missing safeguards and other AI-introduced pattern errors, with Spear, an authorized penetration-testing engine with more than 40 skill packs.

• Security

An enterprise AI agent platform for building, orchestrating and running security agents at scale, such as automated APK vulnerability analysis or penetration testing.

• Agent frameworks
• Security

A terminal-based, AI-agent-driven penetration testing tool that runs blackbox or whitebox tests against a target, and reports vulnerabilities with severity, evidence and suggested fixes.

• Security

An LLM-powered agent that automates Google Dorking for bug bounty hunting and penetration testing, using a search-engine API and a choice of LLM provider.

• Security

A deliberately vulnerable, CTF-style training platform for practicing attacks and defenses from the OWASP Top 10 for LLM Applications, in a scored range or against a real local model.

• Security

A passive, offline-by-default tool that builds a decision graph linking every git commit to the coding-agent prompt that produced it, with drift detection, a DLP audit of what agents read, and signed provenance attestations.

• AI evals
• Security

A pre-execution firewall for AI agents that intercepts every tool call, classifies it against policy in real time, blocks violations and writes a tamper-evident audit trail, with one line of integration and no agent code changes.

• Security

An open, self-hostable access and governance layer that gives every AI agent in an organization the same identity, policy and audit boundary over MCP or HTTP, with signed, independently verifiable erasure.

• MCP servers
• Security

An MCP server that gives an AI assistant a searchable local database of a HackerOne hunter's own bounty history plus 3,600+ public disclosed reports, and generates a full attack briefing for a chosen program.

• MCP servers
• Security

A lightweight governance framework that wraps an LLM client or agent loop with context management, tool governance, risk classification, and observability so agents move from demo-ready to production-reliable.

• Agent frameworks
• Security

A pytest-native framework for writing and running safety and security tests against agentic AI applications, covering adversarial attacks, benign failures, and a range of harm categories with evaluation-driven assertions.

• Testing
• Security

A cross-platform, AI-native terminal that combines a multi-protocol remote-access client, supply-chain vulnerability scanning and more than a dozen autonomous security agents for penetration testing, red-team work and CTF challenges.

• Terminals
• Security

An offensive security framework for agentic infrastructure that captures credentials and configuration from a compromised host, fingerprints reachable AI services such as MCP servers and model gateways, and builds an attack graph.

• Security

A runtime that checks an AI agent's tool calls against deterministic rules before they run, in a fraction of a millisecond per check and without calling any model.

• AI evals
• Security

A modern attack-surface reconnaissance and asset-intelligence platform, rebuilt from the classic ARL project with an async microservice architecture and a native Model Context Protocol server for AI-assisted analysis.

• MCP servers
• Security