#security-tools

Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.

Open-source Continuous Threat Exposure Management (CTEM) platform: asset discovery, attack surface management, risk-based prioritization, validation and remediation in one place. Go API + Next.js web UI.

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

Password Pusher CLI

Protect your SIP Servers from bad actors at https://sentrypeer.org

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

One scan for AI risk. `opena2a review` checks an AI project across credentials, shadow agents, MCP servers, and dependencies, returns a score, and routes each finding to the tool that fixes it. Open source.

Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.

Database anonymization and test data management

Local-first endpoint sensor for AI coding agents. Hash-chained audit trail, MITRE-mapped sequence detection, DLP. Forwards to the SIEM you already run.

Find secrets with Gitleaks 🔑

Efficiently show and monitor end-of-life dates for a number of products in your terminal and CI using endoflife.date API

Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.

Loads environment variables from .env for nodejs projects.

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

Scan AI components (MCP servers, agent skills, npm/PyPI packages) for malware & risky capabilities. Local, deterministic, evidence-anchored. Free & OSS.

A loopback4 extension for helmetjs integration

The in-guest execution agent. Runs security tooling and the MCP bridge inside a Setec microVM. Elastic License 2.0.