Security

An autonomous agent that scans every commit for vulnerabilities, files triaged Jira tickets, and reacts to Jira updates by suppressing known issues or opening a fix pull request, mapped to Cyber Resilience Act requirements.

• Security

A 66-tool MCP server that gives an AI agent unified access to dark-web and threat-intelligence sources: breach databases, ransomware-leak tracking, Tor .onion access, malware analysis, blockchain forensics and exploit search.

• MCP servers
• Security

An autonomous, AI-driven penetration testing framework that combines large language models with more than 72 professional security tools, aimed at security professionals, bug bounty hunters and enterprise red teams.

• Security

A curated catalog of open-source and commercial MLSecOps tools and resources for securing machine learning models, MLOps pipelines, LLM applications and AI agents, alongside adversarial ML research and threat-modeling material.

• Security
• Curated lists

A collection of 54 portable skills for Claude Code, Codex, OpenCode and Pi, covering code review, security audit, feature development, frontend design, project memory and authoring tools, plus an opt-in native sandbox for safer command execution.

• Agent skills
• Security

A source-available control plane that enforces policy and requires human approval before an AI agent's risky tool calls, shell commands, workflows or production changes, keeping an auditable record of what was approved.

• AI evals
• Security

A universal MCP security-audit server that runs a three-tier penetration-testing methodology, reconnaissance, source-to-sink analysis and live validation, so a finding is confirmed before it is ever reported.

• MCP servers
• Security

A security-operations platform that provides a single interface over open-source security tools such as Wazuh, Graylog, Velociraptor, Grafana and InfluxDB, connected through their own APIs and webhooks.

• Security
• Monitoring

A curated list of MCP servers, tools, frameworks, datasets and research for applying agentic AI to cybersecurity work such as vulnerability scanning, threat modeling, reverse engineering and OSINT.

• Security
• Curated lists

An agent-native workspace for red-teaming web applications that combines a fast browser with direct control over HTTP traffic, so agents can navigate, capture, inspect, modify, replay and compare requests in one sandboxed, auditable interface.

• Security
• Browser automation

An open-source tool that checks whether an AI API relay or proxy service genuinely forwards to the Claude, GPT or Gemini model it claims, by diffing probe requests against official API baselines.

• AI evals
• Security

An AI-powered security auditing tool that uses local LLMs through Ollama or any OpenAI-compatible server to detect and analyze potential security vulnerabilities in source code.

• Security

PYAS is a source-available Windows endpoint-security application that combines YARA rules, PE machine-learning classification, digital-signature checks, optional cloud analysis and a kernel-mode driver to detect and block malware.

• Security

dploot is a Python command-line tool that extracts and decrypts Windows DPAPI-protected secrets, such as saved credentials, vaults and certificates, reachable over SMB, WMI, WinRM, MSSQL or a local filesystem.

• Security

Asqav SDK provides Python and TypeScript client libraries for asqav.com that produce a signed, hash-chained compliance receipt for each AI agent action, verifiable by anyone without an Asqav account.

• Security
• APIs

Adrian is an open-source runtime security monitor for AI agents that watches both an agent's actions and its reasoning traces to catch prompt injection, tool poisoning, data exfiltration and out-of-remit behavior as it happens, and can intervene before the action completes.

• AI evals
• Security

OPFOR is an open-source red-teaming tool for AI agents, LLM applications and MCP servers, generating attacks across the OWASP LLM, Agentic AI, MCP and API Security top-ten lists and judging each response with an LLM, from a command line, an IDE, or a browser extension.

• AI evals
• Security

CTI Expert is a Cyber Threat Intelligence and OSINT analysis skill for Claude Code and Codex that adds more than 120 investigation commands and case-tracking to turn the agent into an intelligence analyst, with most core functions needing no paid API keys.

• Security

Semia is a security auditor for AI agent skills that reads a skill's Markdown and embedded commands as data, without ever executing it, and produces an evidence-backed report of the actions, effects and secret reads it may perform.

• Security

KaliGPT is a command-line agentic assistant for Kali Linux that uses Gemini, ChatGPT, Ollama or OpenRouter models to help with ethical hacking and cybersecurity learning and workflows.

• Security

apktool-mcp-server is an MCP server built on Apktool that lets an LLM decompile Android APKs, inspect manifests and smali code, search and modify resources, and rebuild the APK, for reverse engineering and vulnerability analysis.

• MCP servers
• Security

An open protocol and gate that checks an AI agent's authority before it can complete a sensitive action, such as releasing a payment, and produces evidence that can be independently verified rather than trusting the agent.

• AI evals
• Security

HOL Guard is an open-source, local-first security layer for AI agents that reviews shell commands, file access, package installs and MCP tool calls before they run, blocking or flagging secret exposure, destructive operations, prompt injection and supply-chain risks.

• Security

A feed of indicators of compromise, such as malicious URLs, domains, IPs, and file hashes, gathered from posts shared by the infosec community on Twitter/X, published as CSV, JSON, RSS, MISP, and STIX feeds.

• Security