PyPI · npm
NVIDIA-NeMo/Guardrails
NeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems.
自定义许可证2026年9月17日 · 指标 2.10.0
全部标签
目录标签
#llm-security
公开记录中带有此标签的全部仓库——标签来自其 GitHub 主题或软件包注册表发布的关键词。健康度量遵循与记录其余部分相同的版本化方法论。
88 条记录
PyPI
Giskard-AI/giskard-oss
🐢 Open-Source Evaluation & Testing library for LLM Agents
Apache-2.02026年8月28日 · 指标 2.10.0
PyPI · npm
NVIDIA/garak
the LLM vulnerability scanner
Apache-2.02026年10月19日 · 指标 2.10.0
PyPI · npm
NuGuardAI/nuguard
AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assessment, SBOM generation, and static analysis.
自定义许可证2026年9月10日 · 指标 2.10.0
npm
arcjet/arcjet-js
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS code.
Apache-2.02026年9月11日 · 指标 2.10.0
Go · npm
beelzebub-labs/beelzebub
A secure low code deception runtime framework, leveraging AI for System Virtualization.
GPL-3.02026年10月19日 · 指标 2.10.0
PyPI
cisco-ai-defense/skill-scanner
Security Scanner for Agent Skills
自定义许可证2026年9月17日 · 指标 2.10.0
PyPI · npm
koda-ai-studio/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.02026年10月16日 · 指标 2.10.0
PyPI · npm
msaad00/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.02026年9月8日 · 指标 2.10.0
crates.io
nolabs-ai/nono
secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.
Apache-2.02026年9月11日 · 指标 2.10.0
Go
praetorian-inc/julius
Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds
Apache-2.02026年9月17日 · 指标 2.10.0
Go
Mindburn-Labs/helm-ai-kernel
Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.
Apache-2.02026年9月10日 · 指标 2.10.0
npm
CyberStrikeus/CyberStrike
Open-source AI-powered offensive security harness for automated penetration testing.
AGPL-3.02026年9月13日 · 指标 2.10.0
PyPI
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Apache-2.02026年9月16日 · 指标 2.10.0
PyPI · RubyGems
OWASP/www-project-agent-memory-guard
OWASP Foundation web repository
Apache-2.02026年8月25日 · 指标 2.10.0
PyPI
DataFog/datafog-python
Offline PII firewall for AI agents and LLM apps: fast local detection and redaction, Claude Code hook, LiteLLM guardrail. Zero network calls, one dependency.
MIT2026年9月9日 · 指标 2.10.0
PyPI
mcp-hangar/mcp-hangar
MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.
MIT2026年9月21日 · 指标 2.10.0
npm
node9-ai/node9-proxy
The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.
Apache-2.02026年9月13日 · 指标 2.10.0
Go
Nox-HQ/nox
Open-source security scanner with first-class AI app security (prompt injection, embedding leakage, agent over-privilege, MCP hardening). Polyglot AIBOM, SARIF, SBOM. Cosign-signed plugin marketplace. Offline-first, agent-native via MCP.
Apache-2.02026年9月13日 · 指标 2.10.0
npm
asamassekou10/ship-safe
CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.
MIT2026年9月6日 · 指标 2.10.0
PyPI
vaaraio/vaara
Accountable Autonomy: open-source evidence layer that gates every AI agent tool call against your policy and writes a hash-chained record an auditor verifies offline, without trusting you. Root-agnostic; binds to TPM 2.0 / SEV-SNP when present. Your environment, no SaaS, no telemetry. AGPL-3.0.
AGPL-3.02026年10月20日 · 指标 2.10.0
npm · PyPI
Agent-Threat-Rule/agent-threat-rules
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable rules across 10 categories; merged into Microsoft AGT, Cisco AI Defense, MISP, OWASP, FINOS & SigmaHQ. MIT-licensed.
MIT2026年9月9日 · 指标 2.10.0
Go
airomhq/airom
Open-source AI Bill of Materials (AIBOM) scanner: inventories AI models, datasets, prompts, embeddings, vector DBs & RAG pipelines across code, containers & Kubernetes — with file:line evidence, load-time risk detection (poisoned pickle / Keras Lambda / unsafe torch.load) and NIST AI RMF / OWASP compliance mapping. CycloneDX · SARIF · JSON.
Apache-2.02026年9月13日 · 指标 2.10.0
PyPI
sattyamjjain/agent-airlock
A type-checker and contract layer for AI agent tool calls, deny-by-default, in-process, Pydantic-only. Strict argument validation, ghost-argument stripping, and self-healing retries for MCP servers and agent frameworks.
Apache-2.02026年9月18日 · 指标 2.10.0
Go · PyPI
adithyan-ak/AgentHound
Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.
Apache-2.02026年10月20日 · 指标 2.10.0
npm · PyPI
issdandavis/SCBE-AETHERMOORE
Geometric AI governance and evaluation framework with a 14-layer security pipeline, semantic projection, and reproducible benchmark lanes.
MIT2026年8月26日 · 指标 2.10.0
Go · PyPI
mensfeld/code-on-incus
Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.
MIT2026年9月20日 · 指标 2.10.0
PyPI · npm · crates.io
redact-secret/redact-secret
Detect and redact secrets before they reach logs, storage, or LLM context. Deterministic Rust core for JavaScript, Python, Rust, and WebAssembly.
MIT2026年10月10日 · 指标 2.10.0
PyPI · npm
PrismorSec/prismor
Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)
Apache-2.02026年9月11日 · 指标 2.10.0
Go · npm · PyPI
g8e-ai/g8e
A zero-trust execution platform that safely bridges AI agents and infrastructure without surrendering data sovereignty
自定义许可证2026年9月10日 · 指标 2.10.0