security-tools

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.

Bug bounty agent framework for Claude Code, Codex, Gemini, Cursor, Windsurf, Copilot, and OpenClaw — 48 agents, 26 commands, 19 CLI tools, 2 MCP servers, autonomous hunt loops, exploit chain builder.

Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls.

Make your GenAI Apps Safe & Secure :rocket: Test & harden your system prompt

一款证据驱动的 FOFA 资产测绘智能体：支持自然语言侦察、AI 反思、CLI / MCP / Skill / REST API，以及经人工审批的 Nuclei 扫描。

Galah: An LLM-powered web honeypot.

MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.

Turn any LLM into an autonomous pentester. You define the scope, the agent does the work, you review the findings.

A CLI tool for threat modeling and visualizing AI agents built using popular frameworks like LangGraph, AutoGen, CrewAI, and more.

AutoAudit—— the LLM for Cyber Security 网络安全大语言模型

Red Teaming python-framework for testing chatbots and GenAI systems.

Ultra-fast, low latency LLM prompt injection/jailbreak detection ⛓️

A pySigma wrapper and langchain toolkit for automatic rule creation/translation

Research framework that quantifies how steganographic obfuscation of embeddings defeats off-the-shelf statistical detection in RAG pipelines, paired with the VectorPin cryptographic-provenance defense

Prompt Hardener analyzes prompt-injection-originated risk in LLM-based agents and applications.

TraceTree - Runtime behavioral analysis tool that maps the process cascade of suspicious packages into a directed tree, catching supply chain attacks that install-time scanners miss.

Open Source Python SDK for AI Agents Identity