All tags
Catalogue tag

#threat-detection

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

16 records
Tagged “threat-detection”Ranked by health index
PyPI
94Exceptionalhealth index
cisco-ai-defense/skill-scanner
Security Scanner for Agent Skills
Python★ 2,529↓ 340.6K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
92Excellenthealth index
DataDog/stratus-red-team
:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
Go · HCL★ 2,426Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go · npm
88Excellenthealth index
beenuar/AiSOC
Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.
Python · TypeScript★ 2,367Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
npm · PyPI
87Excellenthealth index
Agent-Threat-Rule/agent-threat-rules
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable rules across 10 categories; merged into Microsoft AGT, Cisco AI Defense, MISP, OWASP, FINOS & SigmaHQ. MIT-licensed.
TypeScript★ 388↓ 72.8K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
Go · Maven · npm
87Excellenthealth index
utmstack/UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
TypeScript · Java · PLpgSQL★ 582Sep 14, 2026
AGPL-3.0Sep 14, 2026 · metrics 2.10.0
crates.io
84Excellenthealth index
Karib0u/rustinel
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
Rust★ 485Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
84Excellenthealth index
SpamScope/mail-parser
A tool that parses emails by enhancing the Python standard library, extracting all details into a comprehensive object.
Python★ 458↓ 3.2M/moOct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
81Excellenthealth index
blitzcrieg1/agentmetry
Local-first endpoint sensor for AI coding agents. Hash-chained audit trail, MITRE-mapped sequence detection, DLP. Forwards to the SIEM you already run.
Python · TypeScript★ 15↓ 4,334/moOct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
78Goodhealth index
depalmar/ai_for_the_win
Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.
Python · Jupyter Notebook★ 160Sep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
75Goodhealth index
Webacy-Prod/sdk
Official TypeScript SDK for the Webacy API — blockchain security and risk analysis
TypeScript★ 4↓ 2,516/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
75Goodhealth index
panguard-ai/panguard-ai
Open-source security platform for AI agents -- audits skills before install, monitors 24/7, shares threat intelligence across all users. | AI Agent 開源安全平台 -- 安裝前審計 skill、24/7 即時監控、社群共享威脅情報。
TypeScript★ 63↓ 1,214/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
crates.io · npm
71Goodhealth index
backbay-labs/clawdstrike
Agentic AI EDR for developer workstations and autonomous agent swarms. Build Swarm Detection & Response platforms with Clawdstrike.
TypeScript · Rust★ 288Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
69Goodhealth index
IBM/simrun
Attack Simulation Platform (ASP) for detection testing
Go · Svelte★ 8Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
56Moderatehealth index
TanKimGwan/linmas
Proof-carrying defensive security reviews for AI-assisted software, with deterministic policy, portable evidence, and human review required.
JavaScript★ 2↓ 237/moSep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
Go
45Weakhealth index
bader-a-tech/tracehound
Passive network sensor: JA4 TLS fingerprinting, C2 beacon and DNS-tunnel detection, MITRE ATT&CK-mapped alerts. Single static Go binary with an embedded dashboard.
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
35Weakhealth index
OjasKord/url-safety-validator-mcp
AI-powered URL safety validator MCP server. SAFE/SUSPICIOUS/DANGEROUS verdict for agents.
JavaScript★ 1↓ 862/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0