PyPI · npm99Exceptionalhealth index
microsoft/PyRITThe Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.
Python · TypeScript★ 4,573Oct 3, 2026
npm · Go · crates.io96Exceptionalhealth index
microsoft/agent-governance-toolkitAI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
Python★ 6,138↓ 14.7K/moAug 28, 2026
PyPI92Excellenthealth index
cvs-health/uqlm[JMLR 2026] "UQLM: A Python Package for Uncertainty Quantification in Large Language Models"
Python★ 1,200↓ 1,591/moSep 19, 2026
PyPI · Go · npm92Excellenthealth index
preloop/preloopThe open-source AI agent control plane: MCP firewall, model gateway with budgets, human approvals, runtime observability, and audit trails
Python · TypeScript★ 62↓ 364/moSep 18, 2026
PyPI · npm91Excellenthealth index
sattyamjjain/agent-audit-kitStatic scanner for MCP-connected AI agent pipelines. 348 rules across 14 categories, 14 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.
Python★ 13↓ 4,551/moSep 15, 2026
PyPI · RubyGems90Excellenthealth index
Python★ 155↓ 2,902/moAug 25, 2026
PyPI · Go · npm89Excellenthealth index
cordum-io/cordumThe action firewall for AI agents. Enforce policy and human approval before risky tool calls, shell commands, workflows, and production changes, with auditable evidence.
Go · TypeScript · Python★ 505↓ 14/moSep 17, 2026
npm89Excellenthealth index
node9-ai/node9-proxyThe Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.
TypeScript★ 211↓ 7,422/moSep 13, 2026
PyPI · npm · crates.io +186Excellenthealth index
QWED-AI/qwed-verificationOpen-source AI verification infrastructure for deterministic verification of LLM outputs, tool calls, code, schemas, and agent state before production execution.
Python★ 58↓ 764/moSep 18, 2026
npm · PyPI86Excellenthealth index
issdandavis/SCBE-AETHERMOOREGeometric AI governance and evaluation framework with a 14-layer security pipeline, semantic projection, and reproducible benchmark lanes.
Python · TypeScript★ 6↓ 4,607/moAug 26, 2026
npm84Excellenthealth index
IgorGanapolsky/ThumbGateThumbGate Pre-Action Checks self-improve from ranked lessons and repeated failures, hard-block detected secret leaks, and block matches in strict mode.
JavaScript · HTML★ 26↓ 2,369/moSep 11, 2026
npm84Excellenthealth index
JKHeadley/instarPersistent Claude Code agents with scheduling, sessions, memory, and Telegram.
TypeScript★ 77↓ 157.9K/moSep 5, 2026
PyPI · npm83Excellenthealth index
PrismorSec/prismor Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)
Python★ 343↓ 2,863/moSep 11, 2026
Go · npm81Excellenthealth index
AltairaLabs/PromptKitTest, red-team, and deploy LLM applications with confidence. Multi-provider support (OpenAI, Anthropic, Gemini), MCP integration, self-play testing, and production SDK.
Go★ 9Sep 20, 2026
npm81Excellenthealth index
lua-ai-global/governanceZero-dependency TypeScript SDK for AI agent governance: policy enforcement, injection detection, tamper-evident audit, and standards mapping (EU AI Act, OWASP, NIST, ISO 42001)
TypeScript★ 26↓ 18.7K/moSep 13, 2026
PyPI80Excellenthealth index
Cogensec/agentegrityThe open standard for AI agent integrity. Evaluate, enforce, and prove that autonomous agents are adversarially coherent, environmentally portable, and verifiably assured.
Python · TypeScript★ 3↓ 156/moSep 18, 2026
PyPI · npm80Excellenthealth index
alizahidraja/isnadGrade every agent, scraper and model in a claim's chain — provenance, trust scoring and audit evidence for LLM pipelines
Python★ 53↓ 2,089/moOct 21, 2026
PyPI80Excellenthealth index
b7n0de/proofbundleOffline cryptographic receipts for AI evaluation results — Ed25519 + RFC 6962 Merkle + optional SD-JWT. Integrity, not truth
Python★ 2↓ 1,203/moSep 13, 2026
PyPI80Excellenthealth index
mauhpr/agentlintReal-time guardrails for AI coding agents. 77 rules across 8 packs covering code quality, security, and infrastructure safety. Inline ignore directives, path exemptions, hook timing, and session summaries.
Python★ 32↓ 9,332/moOct 1, 2026
Sahil170595/quantfitQuantize an LLM and check it still refuses what it should — a GPU-aware quantization CLI that measures the safety drift of the quantization it just performed.
Python★ 1↓ 2,468/moOct 12, 2026
Python★ 0↓ 9,632/moSep 8, 2026
fathom-lab/styxxVerification for the agent era. Your coding agent's PR summary cannot lie about its diff - one CI line. Plus the research: the first map of which AI minds can read each other. Every claim machine-verified against committed receipts, negatives included. pip install styxx
Python · HTML★ 15↓ 575/moOct 19, 2026
gumieri/nenyaA lightweight, highly secure AI API Gateway/Proxy written in Go. Acts as transparent middleware between local AI coding clients (OpenCode/Pi/Cursor) and upstream LLM providers (Gemini, DeepSeek, Zhipu z.ai).
Go★ 28Sep 13, 2026
provael/provaelProvael — red-team open Vision-Language-Action (VLA) robot policies in simulation and report an Attack Success Rate (ASR). Prove it. Prevail.
Python★ 6↓ 2,516/moSep 11, 2026
Keesan12/martin-loopMake AI coding agents safe to scale autonomously: assign work, cap spend, enforce policy, verify output, roll back failures, learn from loops, and prove ROI across every repo.
TypeScript · JavaScript★ 51↓ 2,344/moSep 11, 2026
Go · npm77Goodhealth index
OrlojHQ/orlojAn orchestration runtime for multi-agent AI systems. Declare agents, tools, and policies as YAML; Orloj schedules, executes, routes, and governs them for production-grade operation.
Go · TypeScript★ 121Sep 18, 2026
PyPI · npm77Goodhealth index
Python · TypeScript★ 1↓ 239/moSep 18, 2026
tuliplabs-ai/tulip-agentsThe agent framework where the model never holds the trigger — every consequential action clears your policy first, waits for a human when it matters, and lands on a record you can verify. Build on it, or put it around the agent you already have.
Python★ 1↓ 5,295/moOct 8, 2026
Packagist77Goodhealth index
voku/agent-loop♾️ Umbrella php package and unified CLI for the governed agentic-coding loop: board (kanban), learning, and recall-compiler.
PHP★ 4↓ 3,672/moSep 18, 2026
Python★ 48↓ 1,793/moSep 10, 2026