Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
Translation pending
Security projects
Loading…
Security projects
Public projects with traces of AI coding tools in their repositories, sorted by newest listing.
Security · 975 projectsReset filters
Querdian is a Kubernetes-native reverse proxy that enforces per-team, label-based access control on Prometheus, Loki and Tempo queries.
RFC 8693 exchange with nested act, sender-constrained by RFC 9449 DPoP, short-lived tokens, a revocation list enforcement points poll, and public keys anybody can verify offline. Revoking ends authori
No account · No server · No analytics · No cloud sync. Your passwords, on your phone, and nowhere else.
Static security and hygiene grades for 49,783 PKGBUILDs from the AUR and Arch's official repositories, generated by pkglint without ever sourcing them.
Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)
Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2, PAM
Translation pending
Zentral is high-visibility, API-driven Apple MDM. It comes with a pre-configured stack of Mac Admins' favourite open source tools.
Every AI-building team faces one question: can you trust what you're shipping? Snyk secures the code AI writes, the agents it runs, and the apps it builds. Get started for free or book a demo.
Built for AI agents 🤖
Plumber detects CI/CD security issues in your GitHub workflows and gives you a score
Free security scan for apps built with Lovable, Bolt, Cursor or v0 — every finding comes with a fix prompt you paste back into your AI tool.
Scan the NuGet, NPM, PNPM and Yarn dependencies of your codebase against a deny- or allowlist, and score every package on legal, security and operational risk
Veilway is open-source software for running your own VPN server on a censored or hostile network, for yourself or a small group.
Policy enforcement for teams running AI agents in production. A self-hosted gate between your agents and the tools they call: deny-by-default argument contracts, payload-bound approvals, reconcile-bef
Turn any GitHub repo into a security audit and handoff report.
匿名網路社群 anoni.net 架設的 VPN 服務。連線經過偽裝技術後，不容易被認出是 VPN 封包，在會封鎖 VPN 的網路環境中也較容易連上。申請時不需要提供 email 或電話，連線用的金鑰在你自己的瀏覽器裡產生，確保服務的伺服器無法取得。
Translation pending
Search NVD and CISA KEV-backed CVE intelligence and use reviewed AI vulnerability remediation playbooks for Codex, Claude, Cursor, GitHub Copilot, and Devin.
Stop free-trial abuse, coupon abuse and self-referrals. FingerPrint Checker gives every visitor and app install a server-verified device ID and answers allow, verify or deny for trials, coupons, invit
A tamper-evident audit log for AI agents: a record that cannot be quietly changed, with timestamps, checkable offline. Approve risky actions with a passkey and cap what the agent can spend.
Verifica mensajes, links y capturas sospechosas antes de pagar o dar datos. Bot gratuito para comerciantes de la localidad de Santa Fe, Bogotá.
Translation pending
Four SecureBERT 2.0-grounded correlation and retrieval demos spanning classic intrusions and AI-native attacks, mapped to MITRE ATT&CK and ATLAS.
Translation pending
Free and open source. Each camera in its own window, anywhere on your screens, or in grid windows, across several consoles. No RTSP, no cloud login.
Control what enters your software supply chain: a proxy and policy engine for npm, PyPI, Maven, Go, NuGet, Cargo, Composer and RubyGems.
Sua voz merece ser ouvida. Relatos seguros, confidenciais e com possibilidade de anonimato.
Translation pending
Self-contained Shadowsocks implementation in C with libuv, asynchronous DNS, and portable static builds for Linux, macOS, Windows, and FreeBSD.
This free email header analyzer shows in one sentence why a message passed or failed SPF, DKIM, and DMARC, and what to fix.
Single sign-on you host yourself: one account per person for all your apps, with MFA by authenticator code, passkey or a push approval in the KyAuth app.
Free, open-source backup software for Windows 11: automatic incremental backups to an external drive or NAS, encrypted archives, one-file restore.
NovrSOC gives CERTs, sectoral CSIRTs and regulators one platform to monitor, detect and respond across every organisation they oversee, in IT and OT.
Translation pending
Autonomous AI that detects, predicts, and neutralizes cyber threats before they impact your organization. 99.98% threat accuracy with 24/7 monitoring.
Teampass is an open-source, self-hosted password manager for teams: folder-level access control, authenticated AES-256-GCM encryption, access recertification and compliance evidence — running on your
Nimstead Assure finds what's exposed, fixes it safely and gives your auditor proof they can check themselves. Source available. Self-hosted.
Run a privacy-first browser fingerprint check, inspect your public IP risk context, and learn which signals websites can observe with CreepJS.
XiPKI: Compact open source PKI (CA, OCSP responder, certificate protocols ACME, CMP, EST, SCEP), with full support of PQC MLDSA (Dilithium) and MLKEM (Kyber).
Free, open-source abuse blocker that knows which side of the Cloudflare proxy an attacker is really on — even a valid-Host origin bypass — and blocks on the right plane, so it never firewalls Cloudfla
Records your Tapo camera only on motion and keeps the videos where you choose: YouTube, OneDrive, Nextcloud, any cloud or your own disk. Watch them from one page. Free, open source, self-hosted.
Let your AI agent use your keys. Keep the keys to yourself. A local secrets broker for macOS.
Vibgrate scans your repository on your machine. It shows how far your stack has fallen behind, finds dependencies with known vulnerabilities, and gives your coding agent focused context from the code
Before you shield or unshield Zcash, see how many earlier transactions look like yours: offline, before anything is sent.
Open-source LLM gateway that controls where company data goes and proves it. Deterministic, fail-closed, built for NIS2, DORA and GDPR.
Certificates for every agent artifact, signed and publicly logged. Verify them yourself, on any agent platform.
Nook is an open-source, client-side password and secrets manager for encrypted vaults that stay under your control.
A keyless Polyguard Trust Check replaces reCAPTCHA or Turnstile. Free for 1,000 Trust Checks a week, no account required.
Translation pending
Proof that a disclosure was absent, bounded in time by drand and Bitcoin, recomputable by anyone. Live log, hourly epochs, downloadable proofs wrapped in crovia.seal.v1.
Rules, two AI models and a recorded human decision for every internal AI agent. Built for Harborline Financial Group, a fictional customer.
Stop hallucinated tool calls before they hit production. Open-source agent firewall — zero code change, cryptographic audit, multi-tenant, SOC 2 framework. MIT licensed.
Translation pending
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
Guardian Protocol is an open, vendor-neutral defense network for AI agents: a shared registry of known attacks mapped to MITRE ATLAS, a reference sensor that blocks them, and a sharing hub so one orga
EMILIA gives AI the rules every new hire gets, and checks them at a gate the AI can’t go around. Every payment it allows gets a signed receipt your accountant can check offline, without asking the AI
Koschei Web3 is a security validation and risk-intelligence platform that turns observable chain state, authority and evidence into accountable security decisions.
Zones, VLANs, assets, flows, exposure and vulnerabilities, in layers. Self-hosted, AGPL-3.0.
Translation pending
The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.
Attack your AI agent with prompt injection and tool abuse, judge it from the tool-call log, and decide whether to approve it. Mapped to MITRE ATLAS and ATT&CK.
Data and context make agents useful. hoop.dev makes it safe. Attach a sidecar to a database, cluster, or agent sandbox and get masking, guardrails, and approvals on live traffic. No code changes, no n
Manage your WireGuard VPN with ease
Autonomous AI security testing for developers and security teams: find vulnerabilities, prove each with a working exploit, and ship verified fixes with zero infrastructure setup.
Private service names, local DNS and blocklist filtering for your network, with optional replication and sealed backups.
Mask personal data and secrets before they reach an LLM, and put them back on the way out. Local detection, reversible in-memory vault.
The trust layer between AIs and humans: signed, domain-verified information from businesses and real people, in a public log anyone can verify. Free, with open MCP, A2A and API.
dumbtv takes the ads, screen tracking and update nags out of your Fire TV over ADB. No root, none of your apps touched, every step can be undone. Free and open source.
AI-powered code review, SAST, DAST, and penetration testing — fully automated in cloud sandboxes. Proof-backed security findings for every vulnerability.
Open source defense against lateral movement across Kubernetes and AWS. Agentshield maps how your workloads really talk, investigates change with evidence, and proposes fixes you approve.
Use Microsoft Entra with OAuth 2.0 and OpenID Connect (OIDC) to protect the apps and web APIs you build. Learn how to sign in users and manage their access through our quickstarts, tutorials, code sam
Bitcoin investigation tools in your browser: follow the money, label wallets, flag patterns with reasons and write a verifiable report. Nothing to install, nothing stored on a server.
Records everything locally, runs AI on your GPU, never talks to a cloud.
Translation pending
Scans binaries, containers, live TLS and cloud KMS for cryptography, grades post-quantum risk against NCSC 2028/2031/2035, and signs the evidence with ML-DSA. Validated against 25,586 real ELF binarie
Zero-trust trade execution for Solana AI agents and trading bots: DEX routes never reach your wallet, every trade is verified before signing, and it settles at your minimum or reverts.
310 published CVE and GitHub advisories where code written with Claude, GitHub Copilot, Cursor and other AI coding tools introduced or exposed the vulnerability, each traced to the responsible commit.
AVE is the behavioral classification standard for agentic AI components. Stable IDs, AIVSS scores, and behavioral fingerprints for skill files, MCP servers, and agent plugins — mapped to OWASP, MITRE
Run any command through a local, single-run proxy and see where its traffic went, which fields it carried, whether any of it is about you, and what it still sends after you opt out.
Read-only connectors stitch humans, service accounts, keys and AI agents into one identity graph: delegation chains, blast radius, 27 deterministic detectors and a CycloneDX 1.6 Agent-BOM. Proposes di
SecurePilot helps Canadian MSPs and IT consultants assess external security posture, evaluate Loi 25 & PIPEDA readiness, turn gaps into remediation tasks, and deliver client-ready reports — from one w
Self-hosted open-source software that records signed provenance at every data handoff, so recipients can verify the recorded path in their own environment.
Akto provides real-time MCP and AI agent discovery, AI agent security testing, red teaming, agentic posture management, and guardrails. Recognized by Gartner™ as a representative AI agent security pla
Translation pending
A guard for your computer. Claude, ChatGPT, Claude Code, OpenClaw and Hermes reach your browser and files only under your rules: allow, deny or ask you first.
MarkMyAss shows exactly what it removed — and what it cannot verify. Free, open source, no account, independently verified.
CapMonster Cloud is a fast CAPTCHA solver and automatic solving service. This AI-powered tool supports reCAPTCHA, GeeTest, Cloudflare, and more. Scale the online solving of simple and complex CAPTCHAs
HearthLink connects your Windows computers from any network, encrypted end to end. You approve every session and stay in control.
It is not a browser. It sits between an agent and whatever fetcher you already run, decides each destination against your policy before anything leaves, decides every redirect again, bounds what comes
Self-hosted forward proxy for a home, lab or small-office network: a Squid forward proxy, a Go WAF over ICAP, a dnsmasq resolver that sinkholes blocked domains, a Go backend with a REST API, and a Rea
Understand and control tracking in your apps with open source privacy tools.
Scan any website and get evidence of trackers firing before consent, cookies dropped without permission, and personal data leaking to ad platforms.
Translation pending
ztd turns AI actions into governed, signed, auditable transactions instead of letting an agent speak directly to the host.
An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.
As enterprises integrate AI agents into their technology stacks, these agents increasingly rely on external tools and services to navigate complex
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, globa
Is your site affected by PHP2Shell? A free passive check of the version headers your server already sends.
Every app needs an alibi. A history of what AI agents and apps did on your Mac.
A cybersecurity analyst's coverage map across identity, corporate IT, application security, product security, and neighboring domains. Identity is the evidenced slice. Unknown stays unknown.
Quin finds the AI agents in your codebase with no instrumentation: extract system prompts, analyze each agent's intent and risk signals, and export compliance-ready reports.
Check your website's HTTPS, security headers, exposed files and mail domain settings, with fixes for your own server.
An agent's log is only as honest as whoever holds the disk. Provenant makes it evidence.
See if a pay-per-call AI service or MCP server is up, how fast it answers, and whether its price and payment address match its listing, before your agent pays. 25 free checks a day, then $0.001.
Microsoft Sentinel로 더 빠르고 간소화된 SOC를 운영하세요. 위협을 더 빠르게 탐지하고, 대응을 자동화하며, 데이터 레이크로 SIEM 비용을 낮추는 클라우드 네이티브 SIEM입니다.
Translation pending
CVE-2026-109618 / CVE-2026-109619 노출을 비파괴로 점검. 내 사이트 URL로 바로 확인.
Translation pending
Test your Web Application Firewall against common attack payloads (SQLi, XSS, SSRF, etc.) using various HTTP methods.
A binary static analysis tool that provides security and correctness results for Windows Portable Executable and *nix ELF binary formats
Bowser is an open-source browser for 64-bit Windows. Stupidly lightweight, stupidly fast, private, and every ad is gone. It runs your Chrome extensions from their folders.
免费开源的 Claude 访问环境检测。查看 Claude 出口 IP 与支持地区、16 次 DNS 泄露采样、WebRTC 泄露、IP 类型，以及与 IPPure 同算法的中文环境评分。
Translation pending
Kumo discovers what is exposed. Kage investigates what happened. Two open-source security tools, one lifecycle.
Free scanner for crypto trading-bot repos, npm/PyPI packages and Solidity contracts. Finds wallet drainers, key stealers, typosquats and fake-star repos, and runs contracts in a sandbox EVM to see whe
Scan and remove photo metadata in your browser. Photos stay on your device. Supports JPEG, PNG, WebP, GIF, HEIC, AVIF, and TIFF. RAW is part of ClearFrame Pro.
Find the AI tools your clients' staff connected to company systems, and lock down the risky ones.
Private data, untrusted input, a way out: koto keeps the lethal trifecta apart with three tiers and one microVM per agent group.
OKed sends your AI agent's risky actions to your phone. Safe actions just run. Tap yes or no, and your agents keep working. Free iPhone beta.
Security intent, embedded in code. Automate your threat model with GAL and AI.
We make tools that keep you in the loop with AI. They check what the AI is allowed to do, and catch what it missed.
Slipmark makes AI agents prove what they checked. Every verdict is bound to a SHA-256 hash of the files the agent read. Open source GitHub Action, Apache-2.0, with Slipmark Cloud for records, rules an
What an agent's tool may read, write, run and connect to, named by one hash and enforced by the kernel. Open source, Python standard library only. A real Linux kernel boots in your browser to show it.
Open-source network deception platform. Deploy silent decoy services to detect lateral movement, ransomware, and insider threats — before real damage is done.
AgentDossier — discover AI agents, inspect the evidence behind each one, and decide what fits your risk requirements.
Know every piece of software you run. Fix what matters first. Open source and self-hosted.
Models the structure of an authorised password corpus — for policy audits, honeyword decoys and synthetic data. Defensive research; authorised corpora only.
Censgate builds privacy infrastructure for AI systems. Redact, our open-core engine, detects and anonymizes 61 classes of PII and secrets in AI prompts and model responses — Apache-2.0, self-hosted, a
Scan your Claude Code history for the commands you would never have approved. Read-only, local, zero dependencies.
Plug in at home, pair with your mobile device, build and share apps privately. Not even we can eavesdrop.
Open-source governance for AI agents: runtime spend control, policy, memory, identity, cryptography, quality and pre-production drills. Cloud security, IAM and FinOps for AWS and GCP.
Authorize AI agent actions with signed policies, single-use permits and verifiable receipts. Open-source Python and Rust, with native MCP support.
Every AI capability, independently audited. Public, open-source trust scoring for skills, MCP servers, hooks, plugins, and rules across every agent platform.
Free and open source. Cloakroom masks API keys, secrets and personal data on your own machine before your AI coding agent sees them. Works with Claude Code, Codex CLI and Gemini CLI.
Open-source, self-hosted disposable email delivered as a Discord DM, Telegram message, or Slack DM. Runs on Cloudflare Workers, no account, no web UI, no third party in the loop.
TrailSift for Mac clears the record of where you've been that other cleaners miss: the download log, history kept in odd places, remembered Wi-Fi networks, cookies and old iPhone backups, with what de
Email and identity for AI agents. Source available, written in Rust, runs on your own Cloudflare account or on Pylota Mail Cloud.
Mask personal data and cut AI token costs on your device — before anything reaches Claude, ChatGPT, Gemini or any AI. Free Mac app, Chrome & Python.
Replace complex Borg Backup terminal commands with a beautiful web UI. Create, schedule, and restore backups with just a few clicks.
A free, open-source SIEM for Windows and Linux that is easy to set up, easy to query and ready for AI.
Map every path from your app's code to its Supabase database, and catch what's exposed but never used.
Paste-in tools that run entirely in your browser — decode JWTs, lint Dockerfiles, audit security headers and scan for leaked secrets. Nothing is uploaded.
Open-source security operations where AI agents investigate but never act: evidence graph, detections and an approval-gated action broker with rollback.
Open source CLI that plants decoy credentials in your project, then blocks the tool call the moment an AI coding agent reads one or carries the value off the machine. Works with Claude Code, Cursor, C
MCP tool locks, a GitHub Action and signed receipts for teams using Claude Code and Cursor.
Антидетект-браузер із власним ядром Chromium. Локальні профілі, проксі, синхронізація вікон. Free назавжди — 5 профілів.
Translation pending
Evidence-first vendor and AI tool risk review app. Python, Flask, explainable rules, live demo.
End-to-end encrypted logins, API keys and SSH keys for small teams and their agents. Open source, self-hosted on your own Cloudflare in one click.
3B+ Android users deserve access to a safer and open Internet. RethinkDNS is a private, secure, and fast DNS resolver with custom rules, blocklists, and analytics that lets you block websites temporar
The open-source CTF platform: run capture-the-flag competitions with real-time scoreboards, automations, team collaboration and one-command self-hosting.
Zero-to-secure in minutes. TLS, auth, rate limiting, WAF, and AI-readable logs. One binary, one config file.
Translation pending
The open-source CLI that sandboxes AI agents with filesystem, network, and secret fencing.
Built it? Time to show it.
One command in your project folder. Built with AI is enough; AI features are optional.
/nomorevibeSee how to list