security

A live evidence-based lookup and audit service for MCP servers. It checks public health and ownership signals, returns PASS/REVIEW/BLOCK/UNKNOWN, and offers both REST and MCP access for agents.

AI-native application protection platform with autonomous LLM pentesting, proof-of-concept exploit findings, and a full API-driven workflow for scans, reporting, and remediation.

An open-source tool that screens AI agent tool calls and tool results before they are used. It works as an MCP proxy plus hooks adapter, with policy-based decisions, shadow mode, and local logging.

Self-hosted AI agent for terminal and Telegram with Claude/Codex workers, live activity, and a deterministic permission kernel that gates every tool call.

Local AI memory observability and security tool for inspecting, auditing, and rolling back what agents remember about you.

Grith is an OS-level security supervisor for AI coding agents on Linux. It intercepts syscalls, scores risky actions, pauses ambiguous ones for human review, and can deny dangerous calls before they run.

Open-source Go control-plane proxy for AI agents that enforces identity, policy, budgets, and audit for MCP and other upstreams, with anomaly detection that can auto-block compromised agents.

A local CLI for replaying what AI coding agents accessed on your machine, including file reads, secrets that entered context, and possible read-then-network-call exposure paths. It also scans exported ChatGPT, Claude, and Gemini histories for sensitive data.

Kernel-level read gate for AI coding agents that blocks protected file reads before bytes reach the agent, with Linux fanotify and macOS Endpoint Security support.

An AI API gateway/proxy in Go that sits between coding clients and upstream LLM providers, with request routing, secret redaction, context handling, MCP tool integration, and transparent SSE streaming.

A TypeScript static scanner that finds AI agent tool calls with no checks before they can trigger real-world side effects. It supports CLI scanning, JSON output, a generated tool-call registry, and CI/pre-commit enforcement.

Local guardrails for AI coding agents that intercept destructive actions before they execute, now extended to Git hooks for commit and push enforcement.

A zero-config CLI that scans repositories for AI-slop patterns like missing .env.example files, committed secrets, large files, duplicated code, TODO drift, and missing tests, then returns a Vibe Score from 0 to 100.

Beacon is an open-source endpoint telemetry layer for local AI agents. It captures supported activity from tools like Claude Code, Codex CLI, Gemini CLI, OpenCode, Factory Droid, Claude Cowork, and Cursor, then normalizes events for local inspection or forwarding to SIEM pipelines.

Open-source security guidance for specific libraries and versions, aimed at developers and coding agents. The repo includes local setup steps, a web site, and an installable skill for agent workflows.

Open-source endpoint visibility and response for AI agents, with local detection, optional pre-action blocking, and forensic reconstruction.

Local-first MCP gateway that lets multiple AI clients share one server setup, with lazy tool discovery to reduce token usage and built-in tool integrity and quarantine controls.

Exfault is an autonomous Android security testing tool that uses AI agents, static analysis, dynamic analysis, authenticated workflows, and cloud emulators to produce reproducible findings and reports.

A honeypot telemetry and threat intelligence service with searchable IP lookups, recent scanner data, and an MCP/JSON-RPC API for agents and developers.

Airlock is a Mac app that runs Claude Code or Codex inside a virtual machine, keeping agent changes on a copy of your project until you review and apply them.

Open-source platform for governing AI usage across an organization, with MCP gateways, LLM gateways, hosted MCP servers, audit logs, and Claude Environments on Kubernetes.

A command-line tool that sends fake RFC 3464 bounce messages to make spam senders think an address does not exist. The README explains the workflow, configuration, batch mode, multiple-account handling, and provider-specific caveats.

Weir is a CI gate for AI agents that reads OpenTelemetry traces and fails builds when sensitive data reaches forbidden sinks. It includes a gauge for trace coverage, taint tracking, HTML reports, and rule-based scans for agent workflows.

CLI and GitHub Action that scans repos, logs, and CI artifacts for leaked LLM reasoning-trace blocks from Anthropic, OpenAI, and Google.