
pensarai/apexAI-powered offensive security testing using autonomous agents, directly in your terminal.
TypeScript★ 319↓ 2,114/月2026年10月22日

praetorian-inc/brutusFast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.
Go★ 3252026年9月17日

KeygraphHQ/shannonShannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
TypeScript★ 48.1K↓ 5,619/月2026年9月16日

tiagozip/capFree, open-source and self-hosted CAPTCHA alternative to reCAPTCHA. Privacy-first and powered by proof-of-work and instrumentation challenges.
JavaScript · CSS★ 7,770↓ 8,431/月2026年9月15日

Yamato-Security/hayabusaHayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
Rust★ 3,3922026年10月12日

chaitin/SafeLineSafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Go · C++ · Raku★ 22.6K2026年9月19日
Python★ 72026年9月15日

squid-protocol/gitgalaxyConvert source code into a repository-scale structural model. Air gapped, zero dependencies, SARIF and SBOM outputs.
Python★ 58↓ 1,303/月2026年10月20日

openctemio/openctemOpen-source Continuous Threat Exposure Management (CTEM) platform: asset discovery, attack surface management, risk-based prioritization, validation and remediation in one place. Go API + Next.js web UI.
Go · TypeScript★ 72026年10月18日

PrismorSec/prismor Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)
Python★ 343↓ 2,863/月2026年9月11日
C · Rust★ 2112026年9月19日

xalgorix/xalgorixAutonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
Go · TypeScript★ 9692026年9月9日

Armur-Ai/Pentest-Swarm-AIAutonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
Go★ 2,650↓ 5,381/月2026年9月28日
C · Swift★ 6,1712026年8月28日

Shuffle/ShuffleShuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
JavaScript · Shell★ 2,4592026年10月21日

zoharbabin/due-diligence-agentsLegal flags a risk. Finance flags another. We connect and cite. Open-source forensic M&A due diligence: 13 AI agents read your data room across 9 domains (Legal, Finance, Commercial, Tech, Cyber, HR, Tax, Regulatory, ESG), cross-reference findings no single reviewer connects, and trace every one to an exact page & quote.
Python★ 1062026年9月21日

FunnyWolf/agentic-soc-platformAgentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform (AI SOC)
Python · TypeScript★ 1,181↓ 48/月2026年9月16日

depalmar/ai_for_the_winBuild AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.
Python · Jupyter Notebook★ 1602026年9月16日
TypeScript★ 16↓ 53.9K/月2026年10月21日
Go · Shell★ 72026年10月19日
Python★ 67↓ 836/月2026年7月17日
Go · TypeScript★ 332026年9月19日

Drakon-Systems-Ltd/ShieldCortexMemory security for AI agents. Scan native memory writes, gate tools on bound hosts, inspect what was stored. Not a second brain.
TypeScript★ 25↓ 8,879/月2026年10月20日

OpenOSINT/OpenOSINTAI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.
Python · JavaScript★ 1,599↓ 2,892/月2026年9月18日

agentgg-dev/agentggOpen source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own model.
TypeScript★ 300↓ 5,835/月2026年9月17日

panguard-ai/panguard-aiOpen-source security platform for AI agents -- audits skills before install, monitors 24/7, shares threat intelligence across all users. | AI Agent 開源安全平台 -- 安裝前審計 skill、24/7 即時監控、社群共享威脅情報。
TypeScript★ 65↓ 125/月2026年10月22日
Python · JavaScript★ 1,097↓ 137/月2026年9月9日

RAJANAGORI/NightingaleNightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.
Shell · Dockerfile · Python★ 3132026年9月16日

sunglasses-dev/sunglassesOpen source input firewall for AI agents, beta. A local scanner checks text, code, PDFs, images, QR codes, audio and video with 1,583 patterns across 117 categories and reports findings and incomplete scans. A Claude Code hook blocks secret material in tool calls and the paths and hosts your policy lists before tools run.
Python★ 10↓ 1,856/月2026年10月19日

vaquarkhan/MCP-BastionMCP-Bastion: The Zero-Infrastructure Runtime Middleware ,Enterprise-Grade Security Middleware for the Model Context Protocol (MCP)
Python★ 5↓ 3,959/月2026年9月18日