
stacklok/toolhiveToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.
Go★ 2,1652026年9月14日

microsoft/PyRITThe Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.
Python · TypeScript★ 4,5732026年10月3日
Python★ 5,7752026年8月28日
PyPI · crates.io · npm96卓越健康指数

hashgraph-online/hol-guardOpen-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
Python · Rust★ 963↓ 76.5K/月2026年10月22日
Go★ 272026年9月10日

NVIDIA/SkillSpectorSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Python★ 17.8K2026年9月19日

NuGuardAI/nuguardAI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.
Python★ 44↓ 2,415/月2026年9月10日

OWASP/DockSecAI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
Python★ 478↓ 1,801/月2026年9月10日

arcjet/arcjet-jsRuntime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS code.
TypeScript★ 682↓ 2.2M/月2026年9月11日
Python★ 2,529↓ 340.6K/月2026年9月17日

koda-ai-studio/agent-bomOpen security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Python · TypeScript★ 32↓ 2,924/月2026年10月16日

msaad00/agent-bomOpen security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Python · TypeScript★ 31↓ 5,301/月2026年9月8日

nolabs-ai/nonosecure multiplexed execution paths for agents - zero trust, zero setup, zero latency.
Rust★ 4,037↓ 118.6K/月2026年9月11日

praetorian-inc/juliusSimple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds
Go★ 2362026年9月17日

Mindburn-Labs/helm-ai-kernelFail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.
Go★ 552026年9月10日

praetorian-inc/augustusLLM security testing framework for detecting prompt injection, jailbreaks, and adversarial attacks — 190+ probes, 28 providers, single Go binary
Go★ 2842026年9月9日
TypeScript★ 2,7112026年9月13日

akto-api-security/aktoAkto is the fastest growing AI Security platform for your teams to secure AI agents, MCPs, LLMs, Agent skills, Gen AI apps in your organization.
Java · JavaScript★ 1,5322026年10月22日

yvgude/lean-ctxLeanCTX is the Context Gateway for AI Systems. Select task-relevant context, apply supported controls, connect local knowledge and inspect recorded evidence. Open-source Engine: CLI, MCP, hooks and supported proxy paths.
Rust★ 3,893↓ 917/月2026年10月20日

sattyamjjain/agent-audit-kitStatic scanner for MCP-connected AI agent pipelines. 348 rules across 14 categories, 14 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, public CVE-to-rule ledger.
Python★ 13↓ 4,551/月2026年9月15日

usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Python · Go★ 63K2026年9月16日
Python★ 155↓ 2,902/月2026年8月25日

ofri-peretz/eslintSecurity and code-quality ESLint plugins — 477 rules across 30 packages: 272 security rules mapped to CWE + OWASP, 107 quality, 98 React/a11y. ESLint 8.40/9/10 + Oxlint. The lint layer AI-generated code needs.
TypeScript · MDX · JavaScript★ 19↓ 52.2K/月2026年9月13日

beenuar/AiSOCOpen-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.
Python · TypeScript★ 2,596↓ 94/月2026年10月22日

mcp-hangar/mcp-hangarMCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.
Python★ 15↓ 2,905/月2026年9月21日

node9-ai/node9-proxyThe Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.
TypeScript★ 211↓ 7,422/月2026年9月13日

Nox-HQ/noxOpen-source security scanner with first-class AI app security (prompt injection, embedding leakage, agent over-privilege, MCP hardening). Polyglot AIBOM, SARIF, SBOM. Cosign-signed plugin marketplace. Offline-first, agent-native via MCP.
Go★ 102026年9月13日

asamassekou10/ship-safeCLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
JavaScript★ 830↓ 5,893/月2026年9月6日

itcmsgr/nftbanNFTBan is an open-source Linux Intrusion Prevention System (IPS) and firewall manager built on nftables, designed to integrate cleanly with modern Linux security stacks.
Shell · Go★ 72026年9月8日

Agent-Threat-Rule/agent-threat-rulesOpen detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable rules across 10 categories; merged into Microsoft AGT, Cisco AI Defense, MISP, OWASP, FINOS & SigmaHQ. MIT-licensed.
TypeScript★ 388↓ 72.8K/月2026年9月9日