OPEN SOURCE
89luca89/clampdown
Run AI coding agents in hardened container sandboxes.
OPEN SOURCE
rolecraft-sh/rolecraft
The security-first skill manager for AI agents — every install runs a security scan. Manage skills & MCP servers across 87 agents. Zero-dependency CLI.
OPEN SOURCE
matheusht/redthread
An autonomous red-teaming engine for LLMs. RedThread manages the full security lifecycle: generating adversarial attacks, executing precision evaluations, and synthesizing validated guardrails for safe self-improvement.
OPEN SOURCE
mah3sec/forgeguardian
Local-first, AI-native Software Supply Chain Security Platform
OPEN SOURCE
dmtrkovalenko/bashka
Stop running unverified bash scripts to install software! curl <url> | bashKA for static verification of bash script safty and managing installed software
OPEN SOURCE
xiayutian11/maskit
数据面具 Data Maskit — 专为大模型打造的本地隐私脱敏网关（请求自动打码，回复流式还原；支持 Cursor / Claude Code / Codex / Pi 等任意可配 Base URL 工具）
OPEN SOURCE
qwq233/ohmykeymint
Open the project to explore the idea and the code.
OPEN SOURCE
shinthink/blitzstrike
⚡ Blitz Strike — a universal MCP penetration-testing toolbelt. Structured methodology: reconnaissance & attack-surface mapping, source-to-sink analysis, and live validation. 57 escalation chains, 130-tool catalog, intelligence data layer. One server, every agent.
OPEN SOURCE
amnezia-vpn/amnezia-client
Amnezia VPN Client (Desktop+Mobile).
OPEN SOURCE
mhsanaei/3x-ui
Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG) - GitHub - MHSanaei/3x-ui: Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)
OPEN SOURCE
raemote/raemote_server
Your self-hosted apps served through an end-to-end excerypted, private way.
OPEN SOURCE
venkatapgummadi/ascend
DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.
OPEN SOURCE
strategic-automation/violin
Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evidence-backed findings, and release-gated reporting.
OPEN SOURCE
seaof0/dsh-redteam-model
基于dsh web实现的多种模式，目的是服务于redteam进行授权的安全研究，覆盖渗透测试、红队评估、代码审计等范围领域，请勿用于非法行为。（允许二开，赋予模块各位自己的业务逻辑，方法论只有自己熟练的才好用，好的方法论=好的生态）
OPEN SOURCE
jedisct1/turbocrypt
A fast, easy-to-use, and secure command-line tool for encrypting and decrypting files , git repositories and directory trees.
OPEN SOURCE
robinvdvleuten/xprsn
Tiny and CSP-safe expression language for JavaScript - getquario/xprsn
OPEN SOURCE
stackonehq/defender
Open source prompt injection protection for Agents calling tools (via MCP, CLI or direct function calling). Detect and defend against prompt injection attacks. 22MB, CPU-only, < 10ms latency.
OPEN SOURCE
google/mantis
A modular, stack-agnostic toolkit of security review skills for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.
OPEN SOURCE
laravel/vet
Laravel Vet is a dependency audit for PHP.
OPEN SOURCE
apeireth/apeireth
Apeireth — A Pure Safe Rust AGI Operating System & Cognitive Microkernel. 16 crates: continuous topological memory, causal world model, cognitive scheduler, Ember HUD, triple-onion security & portable USB agent.
OPEN SOURCE
pika-monitor/pika
Lightweight probe monitoring — Go + VictoriaMetrics + PostgreSQL/SQLite | Real-time metrics, service checks, tamper protection & security audit
OPEN SOURCE
yean-sec/strikeagent_atkbrain-flash
由夜安团队研发的AI渗透测试平台，涵盖红队打点、SRC、CTF，特别是在红队领域有极为亮眼的存在.
OPEN SOURCE
minglink/dsh-infinite-gen-4
DeepSeek v4.1 flash 网络安全红队工具（无限四代） — jailbreak prompts and test suite for DeepSeek 求 Star 收藏 ⭐欢迎大家提交项目的改进
OPEN SOURCE
maxhu-xuan/chat-archive-guard
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.