#security-tools

AI EDR for developer workstations and autonomous agent fleets. Build Swarm Detection & Response platforms with Clawdstrike.

🗿 Generate SHA-256 and SHA-512 checksums of a RubyGem

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

CLI to interact with Kondukto

The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.

A fast WordPress plugin enumeration tool

Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)

Collaborative application security testing between humans and agents via CLI and MCP

Quickly track and analyze your ruby gem dependencies

Autonomous AI pentesting engine, continuous offensive security across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes and IoT firmware. Agentic reasoning plus real exploit execution deliver proof-based vulnerabilities. Privacy gateway: the LLM never sees your real IPs, hosts or creds, nothing leaves your perimeter.

The Certora Prover is the state-of-the-art security tool for automated formal verification of smart contracts running on EVM-based chains, Solana and Stellar

High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.

Highly customizable low-interaction experimental honeypot that mimics specific hosts.

CLI to interact with Kondukto

Unified Risk & Threat Intelligence Management Platform

Patch-level verification for Bundler

One wifi password per device. Ad Blocking & Privacy Blocklists. Policy Based Network Access

Runtime Firewall for AI agents which catches the rogue tool call before it runs. Dangerous commands, secret leaks, prompt injection. For Claude Code, Codex and framework SDKs

面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams

MCP-Bastion: The Zero-Infrastructure Runtime Middleware ,Enterprise-Grade Security Middleware for the Model Context Protocol (MCP)

Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.

A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email

Dependency-minimal Interactsh protocol client and server for out-of-band testing (OOB / OAST)

Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.

A modern, cross-platform OpenPGP tool with a unique dual-engine core: switch freely between the battle-tested GnuPG and a modern, memory-safe Rust rPGP backend. It makes encryption, signing, and key management easier and more trustworthy in everyday privacy workflows.

Zero-knowledge one-time secret sharing. End-to-end encrypted, self-hosted, open source.

Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.

Audit and fix your Mac's security in one command. No agent, no signup, open source.

Local-first security recon that briefs your AI coding agent: facts + tailored probes, code-in / artifacts-out. No LLM, no server, no running app.

Fuzz your Rust code with Google-developed Honggfuzz !