Go
stacklok/toolhive
ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
Apache-2.0Jul 29, 2026 · metrics 2.10.0
All tags
Catalogue tag
#ai-security
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
72 records
Go
stackloklabs/toolhive
ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
Apache-2.0Jul 18, 2026 · metrics 2.10.0
PyPI
Giskard-AI/giskard-oss
🐢 Open-Source Evaluation & Testing library for LLM Agents
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
cisco-ai-defense/skill-scanner
Security Scanner for Agent Skills
Custom licenseAug 13, 2026 · metrics 2.10.0
Go
stacklok/toolhive-registry-server
Discover, govern and control access to MCP servers and agent skills across your organization
Apache-2.0Jul 18, 2026 · metrics 2.10.0
PyPI · npm
msaad00/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.0Jul 16, 2026 · metrics 2.10.0
PyPI · npm
sattyamjjain/agent-audit-kit
Static scanner for MCP-connected AI agent pipelines — 271 rules across 12 categories, 12 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.
MITAug 2, 2026 · metrics 2.10.0
PyPI · crates.io · npm
hashgraph-online/hol-guard
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go
mindburn-labs/helm-ai-kernel
Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Go
praetorian-inc/augustus
LLM security testing framework for detecting prompt injection, jailbreaks, and adversarial attacks — 190+ probes, 28 providers, single Go binary
Apache-2.0Jul 16, 2026 · metrics 2.10.0
Maven
akto-api-security/akto
Akto is the fastest growing AI Security platform for your teams to secure AI agents, MCPs, LLMs, Agent skills, Gen AI apps in your organization.
MITSep 5, 2026 · metrics 2.10.0
npm
CyberStrikeus/CyberStrike
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.
AGPL-3.0Jul 23, 2026 · metrics 2.10.0
Go
praetorian-inc/julius
Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds
Apache-2.0Aug 8, 2026 · metrics 2.10.0
PyPI
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
PyPI · RubyGems
OWASP/www-project-agent-memory-guard
OWASP Foundation web repository
Apache-2.0Aug 25, 2026 · metrics 2.10.0
Go
mindburn-labs/helm-oss
Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.
Apache-2.0Jul 18, 2026 · metrics 2.10.0
crates.io
nolabs-ai/nono
Sandbox any AI agent in seconds - zero setup, zero latency.
Apache-2.0Jul 16, 2026 · metrics 2.10.0
PyPI · npm
NuGuardAI/nuguard
opensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis
Custom licenseJul 18, 2026 · metrics 2.10.0
crates.io
always-further/nono
Sandbox any AI agent in seconds - zero setup, zero latency.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
crates.io
lukehinds/nono
Sandbox any AI agent in seconds - zero setup, zero latency.
Apache-2.0Jul 19, 2026 · metrics 2.10.0
PyPI
owasp/docksec
AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
MITJul 17, 2026 · metrics 2.10.0
npm
asamassekou10/ship-safe
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
MITSep 6, 2026 · metrics 2.10.0
Go · npm
beenuar/AiSOC
Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.
MITSep 5, 2026 · metrics 2.10.0
Go
itcmsgr/nftban
NFTBan is an open-source Linux Intrusion Prevention System (IPS) and firewall manager built on nftables, designed to integrate cleanly with modern Linux security stacks.
MPL-2.0Jul 15, 2026 · metrics 2.10.0
Go
Nox-HQ/nox
Open-source security scanner with first-class AI app security (prompt injection, embedding leakage, agent over-privilege, MCP hardening). Polyglot AIBOM, SARIF, SBOM. Cosign-signed plugin marketplace. Offline-first, agent-native via MCP.
Apache-2.0Jul 24, 2026 · metrics 2.10.0
npm
emiliaprotocol/emilia-protocol
Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
ofri-peretz/eslint
Security & code-quality ESLint plugins — 350+ CWE-mapped rules across 18 domains, ESLint + Oxlint. The lint layer AI-generated code needs.
MITJul 25, 2026 · metrics 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.0Aug 5, 2026 · metrics 2.10.0
Go · PyPI
adithyan-ak/AgentHound
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
squid-protocol/gitgalaxy
Deep repository intelligence for humans and ai. Air gapped, on premise, zero dependency SAST for 50 languages regardless of compilation status. Sarif and sbom outputs.
Custom licenseAug 22, 2026 · metrics 2.10.0