Go
stacklok/toolhive
ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
All tags
Catalogue tag
#ai-security
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
112 records
PyPI · npm
microsoft/PyRIT
The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.
MITOct 3, 2026 · metrics 2.10.0
PyPI
Giskard-AI/giskard-oss
🐢 Open-Source Evaluation & Testing library for LLM Agents
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · crates.io · npm
hashgraph-online/hol-guard
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Go
stacklok/toolhive-registry-server
Discover, govern and control access to MCP servers and agent skills across your organization
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm · PyPI
NVIDIA/SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI · npm
NuGuardAI/nuguard
AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.
Custom licenseSep 10, 2026 · metrics 2.10.0
PyPI
OWASP/DockSec
AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
MITSep 10, 2026 · metrics 2.10.0
npm
arcjet/arcjet-js
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS code.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
PyPI
cisco-ai-defense/skill-scanner
Security Scanner for Agent Skills
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI · npm
koda-ai-studio/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
crates.io
nolabs-ai/nono
secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go
praetorian-inc/julius
Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
Mindburn-Labs/helm-ai-kernel
Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
praetorian-inc/augustus
LLM security testing framework for detecting prompt injection, jailbreaks, and adversarial attacks — 190+ probes, 28 providers, single Go binary
Apache-2.0Sep 9, 2026 · metrics 2.10.0
npm
CyberStrikeus/CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
Maven
akto-api-security/akto
Akto is the fastest growing AI Security platform for your teams to secure AI agents, MCPs, LLMs, Agent skills, Gen AI apps in your organization.
MITOct 22, 2026 · metrics 2.10.0
crates.io · npm
yvgude/lean-ctx
LeanCTX is the Context Gateway for AI Systems. Select task-relevant context, apply supported controls, connect local knowledge and inspect recorded evidence. Open-source Engine: CLI, MCP, hooks and supported proxy paths.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI · npm
sattyamjjain/agent-audit-kit
Static scanner for MCP-connected AI agent pipelines. 348 rules across 14 categories, 14 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI · RubyGems
OWASP/www-project-agent-memory-guard
OWASP Foundation web repository
Apache-2.0Aug 25, 2026 · metrics 2.10.0
npm
asamassekou10/ship-safe
The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.
MITOct 22, 2026 · metrics 2.10.0
npm
ofri-peretz/eslint
Security and code-quality ESLint plugins — 477 rules across 30 packages: 272 security rules mapped to CWE + OWASP, 107 quality, 98 React/a11y. ESLint 8.40/9/10 + Oxlint. The lint layer AI-generated code needs.
MITSep 13, 2026 · metrics 2.10.0
PyPI · Go · npm
beenuar/AiSOC
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
MITOct 22, 2026 · metrics 2.10.0
PyPI
mcp-hangar/mcp-hangar
MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.
MITSep 21, 2026 · metrics 2.10.0
npm
node9-ai/node9-proxy
The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
Nox-HQ/nox
Open-source security scanner with first-class AI app security (prompt injection, embedding leakage, agent over-privilege, MCP hardening). Polyglot AIBOM, SARIF, SBOM. Cosign-signed plugin marketplace. Offline-first, agent-native via MCP.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
itcmsgr/nftban
NFTBan is an open-source Linux Intrusion Prevention System (IPS) and firewall manager built on nftables, designed to integrate cleanly with modern Linux security stacks.
MPL-2.0Oct 22, 2026 · metrics 2.10.0
npm · PyPI
Agent-Threat-Rule/agent-threat-rules
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable rules across 10 categories; merged into Microsoft AGT, Cisco AI Defense, MISP, OWASP, FINOS & SigmaHQ. MIT-licensed.
MITSep 9, 2026 · metrics 2.10.0
npm
KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
AGPL-3.0Sep 16, 2026 · metrics 2.10.0