Forward or paste a suspicious email. A team of AI agents dissects it and returns an evidence-cited verdict: SCAM, SUSPICIOUS, or LIKELY SAFE.
Translation pending
Security projects
Loading…
Security projects
Public projects with traces of AI coding tools in their repositories, sorted by newest listing.
Security · 1,298 projectsReset filters
Open source desktop app and Chromium extension for capturing, organizing, and verifying web evidence in OSINT investigations. Local-first, with SHA-256 hashes, a signed manifest, and RFC 3161 timestam
Point your phone and see the Bluetooth devices around you in AR. Find unknown trackers. Scans are stored on your phone.
Free scanner for vibe-coded JS, TypeScript and Python apps: leaked keys, broken API routes, swallowed errors, vulnerable packages, PII leaks. Ranked fixes.
Generate audit-ready PDF and Word documentation for Microsoft Intune policies, settings, assignments, and security baselines with a free read-only tool.
Reads your existing coding-agent logs and turns them into clear answers about exposure, activity and cost. Local, read-only, no network.
Compliance gateway for OpenAI, Anthropic and more. Enterprise self-hosted keeps sensitive data in your network, apart from system-prompt text. Signed receipts.
Herramientas para gestionar la adecuación a la Ley 21.719 de protección de datos
Translation pending
AI summary · website and README
Queryable encryption for Postgres. Searchable field-level encryption with identity-bound keys, on the database you already use. The infrastructure for privacy-first applications.
msb-manager runs coding agents in per-project microVMs with deny-by-default egress and credentials that never enter the VM.
Security-first proxy for Large Language Models with multi-provider support, ring-based plugin pipeline, and real-time SOC dashboard.
Check a Supabase app's Row Level Security in about a minute. Real attacks on a private copy in your browser, with a fix file when one can be made. Free, no signup.
Locke is the Sonomos Early Access desktop app for x64 Windows and Linux. It screens AI websites through the Locke Extension and command-line, script and SDK traffic through a local proxy. macOS is com
A free, open-source VPN client for your subscription. Works with VLESS + Reality, VMess, Trojan, Shadowsocks, Hysteria2, TUIC and WireGuard, and with Remnawave, Marzban and 3x-ui subscriptions. For Wi
Let Claude Code, Cursor and Codex use your credentials without seeing them. Touch ID per credential, proxy calls, audit log. Open source, local, macOS.
A safety floor your AI agents can't get under: one policy for every agent, judged by what each call will run, backstopped by the kernel, with a signed record.
TRACE (Toolkit for Retrieval and Analysis of Cyber Evidence) is free, open-source digital forensics software. Open E01, AFF4 and raw disk images read-only, triage what stands out, recover deleted file
A checklist of the privacy and AI settings worth turning off, with the menu path to each and a flag when it is time to check again.
Compare data privacy, retention, and model training policies across major LLM providers, inference APIs, and AI coding tools.
Flowlight is open-source application-aware network intelligence for macOS, with deeper visibility into AI agents, tools and MCP servers.
Lets a person or organization govern their own AI agent through scoped, signed delegation
Translation pending
AI summary · revised during review
An open standard for AI agent identity — signed declarations and attestations that verify offline.
Free security intelligence API and MCP server. 55 tools: CVE, domain recon, IOC, MITRE ATLAS, D3FEND, code security. No signup required.
One folder Claude Code, Cursor and Codex all read over MCP. An agent reads only what its person can, every write is a version, and folders share outward.
Verify and issue EU Digital Identity Wallet credentials with one API call. Open source, runs on your servers, personal data stays with you.
Free scam shield for Indian elders and families. Paste a message and get a plain verdict: Safe, Be Careful, or Danger. English, Hindi, Hinglish. Runs on your device.
Pattern-matching call blocker for Android. No internet permission. No ads. No tracking.
Translation pending
开了代理分流，国内外网站分别看到哪个 IP？用国内外几十个服务同时检测出口 IP，并检查 WebRTC / DNS 泄露、AI 服务地区和 IP 风险评分。纯前端开源，无后端。
Translation pending
Baret simulates every Monad transaction before you or your AI agent signs it, checks it against your rules, and explains the verdict in plain words.
Explore SPDX 3 SBOMs as an interactive graph. Packages, source files, builds, tools, licenses... and every link between them.
Deterministic rules that enforce what your agents can do in real time, per user and per tool call, with live and after-the-fact analysis. Open source by Hexamind.
Ten open-source tools to scan, prevent, attack, investigate, gate and contain prompt-injection, MCP supply-chain and agent-to-agent attacks against AI agents.
Signed, tamper-evident records of what your AI agent decided and what it relied on. Anchored on Solana, checked by anyone in their own browser.
Secrets management for the agentic era. No more secrets in .env files. Self-hosted, no limits, free forever.
Keyorra is a free password manager for your Mac: an encrypted vault that never leaves it, and a browser extension that fills logins, cards and one-time codes.
AI SAFE²: 161 controls across 5 pillars, mapped to 32+ frameworks. The open AI governance framework for agentic AI — free on GitHub.
Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure (CV
ScanX checks every QR code and barcode for scams before you open it, makes QR codes and gives you a Digital ID card you can share in one tap. Privacy-first: scanning works without an account.
ProofAPI seals every AI decision on Solana. Anyone can check it with a link, without trusting the operator.
Stenwatch is a free, open-source tool that narrows every public software flaw to the few that matter to your organisation, with a plain reason for each one.
Jentic is a sovereign agent operating system. Your people and your agents work side by side, and the knowledge they create compounds into something you own.
Understand what is publicly discoverable about your website.
Browse powerful, production-ready open-source libraries created to help developers build faster and integrate features with ease.
Find the round trips, quick exits and fingerprint amounts that link your shielded Zcash activity, and check a withdrawal before you make it.
A free, privacy-first relay network that helps you reach the open internet. Open source and nonprofit-run.
Free Mac app that shows what your AI coding tools installed, checks their settings for problems, and tells you what's safe to clean up. It only looks.
Code checks 500 certificates exactly, Jev reads the ticket and judges only the few that matter, and a fixed policy decides. Every input, output and cent is shown.
Mailprogramm, Mailserver, SSH-Client, Remotedesktop, Passwortmanager mit eigenem Server, Editor und Bildschirmspiegeln: Open Source, ohne Telemetrie, mit Nyu der Katze. Ein Hobbyprojekt von Streamer M
Translation pending
BlindHop mixnet privacy layer for Substrate light clients. Toggle between direct, fast, and full metadata privacy modes. No setup required — runs in your browser.
SSO, MFA, passkeys, RBAC, and session management — built for developers, trusted by enterprises.
The Qeet ID console for identity, authentication, authorization, and security operations.
AI translation
Subdomain enumeration you can trust. subenum classifies every DNS lookup, grades the run complete, degraded or unreliable, and ships as a single static Go binary.
Govern what context, models, and tools AI agents may use.
Keep all your devices protected with Blokada content filtering and encryption.
One control room over open agent governance, running on your own infrastructure: per-action passkey kill switch, WireGuard remote, post-quantum signatures, and a local-first AI copilot. Apache-2.0, se
AI governance software covering 30+ frameworks: EU AI Act, ISO 42001, NIST AI RMF, GDPR. Inventory, risk, policy, evidence, LLM evaluation.
Translation pending
Find what your app accidentally exposed. Free, read-only scan of your live site. No signup.
Translation pending
Docudis finds names, emails, phone numbers, IBANs and addresses in your documents and replaces them with labels, on your phone, before you send them to an AI.
MITM proxy for reverse engineering — LLM-ready output, multi-language codegen, sign algorithm inference, request replay, plugin system, native desktop GUI (Wails + Svelte)
Translation pending
Research • Tools • OSINT • AI. Инструменты, исследования и инженерный процесс.
Translation pending
Unofficial MCP server for the Sophos Fusion and Sophos Central APIs. Not a Sophos product and not supported by Sophos. 310 tools across 22 API namespaces, as a Claude Desktop extension or via npx.
Rapid7 Bulk Export MCP - AI-powered analysis for Rapid7 Command Platform data using MCP (Model Context Protocol) & AgentSkills.
Large Language Model (LLM) information redactor that prevents private information from being sent to LLMs from agentic tools by substituting placeholders for private information on outgoing requests a
Sequent is the world’s first online voting platform to ensure the highest level of confidence in elections for voters, election managers, and auditors
Vanity address mint for EVM and TRON. You make half the key on your own computer, we mint the other half on GPUs, and only you can put the full private key together.
One sealed envelope per person: a letter and the passwords they need, encrypted on your phone, opened only after months of silence. Open source, not audited.
Open-source CPG-based interprocedural taint analysis + LLM triage, with a Ghidra-style audit workbench. Runs fully offline.
AI Agent permission enforcement and sandbox security SDK, extracted from claw-code
Inspect SM2 signatures, ciphertext layouts, and nonce-reuse recovery in a browser.
Translation pending
AI IDE security hook: blocks directories, scans secrets, and protects AI interactions
Translation pending
Open-source crates for the Enclavia enclave runtime: in-enclave services, shared protocol types, client SDK, CLI. Dual-licensed Apache-2.0/MIT.
cMCP: Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.
Translation pending
Klickbarer Prototyp: Pendelströme Konstanz–Kreuzlingen gemeinsam berechnen, ohne Rohdaten herzugeben (MPC, PSI, Differential Privacy) – mit Testdaten.
Translation pending
You can't govern what you can't see. Role mining and analytics that make sense of your authorization data — open source, self-hosted, your identity data never leaves your environment.
Verify two deployed randomness beacons from their real outputs: NIST Beacon 2.0 pulses (SHA-512 hash chain, skiplist, precommitment, RSA signature) and drand League of Entropy rounds (threshold BLS si
Check a sender address or a full email for phishing signals, with each finding explained. PhishGuard’s scores are heuristic evidence, not a guarantee of safety.
Truly redact PDFs in your own browser. Text is removed from the file, not covered with a black box, and your document is never uploaded.
Client-side visual analyzer for iptables, ip6tables, nftables and ufw rulesets — paste the output, see the structure.
Security checks agents can call: MCP manifest preflight, source-pattern scanning and injection screening, with signed redacted receipts.
Browse, search, and explore all Microsoft Intune Settings Catalog definitions — fast, and without needing Intune access.
Translation pending
Establish trust on every request. Welcome real users and AI agents, stop abusive bots — GDPR-compliant, risk-based verification that minimises friction.
13 specialized AI agents, 30+ MCP integrations, 7,200+ detection rules. Apache 2.0. Local-first.
Translation pending
Live demo of the Risk, Fraud & Regulatory Intelligence Copilot. Runs in your browser with fake sample data; no Snowflake, no AI call.
AI-control monitors for LangChain agents and Deep Agents: every step an agent proposes is judged before any of its own tools run, and a control protocol decides what runs.
Provenance-graph attack reconstruction from eBPF / Sysmon / auditd telemetry
Translation pending
Локальный AI-ассистент для аудита безопасности кода на Python, JavaScript/TypeScript и Go: находит уязвимости, классифицирует по CWE и OWASP Top 10 и предлагает проверенные исправления.
Translation pending
Sample-to-story malware analysis pipeline (lab-only, never executes samples)
Translation pending
shard-core combines ChaCha20-Poly1305 with Shamir key sharing, resilient recovery, explicit secret output, Fordefi phrase workflows, and a verified offline build path.
From generation to distribution. Generate, manage, and share SBOMs and compliance documents. Integrate with GitHub, GitLab, and more. CRA & NTIA compliant.
XTM Hub is your gateway to Filigran's cybersecurity solutions.
Sealed evidence, reconstructed attack chains and the exact log line behind every finding, for Claude Code, Codex, Cursor, Gemini, Copilot and more. Open source.
v7.0: 4 lenses × 4 mindsets + consensus scoring. 90% precision, free. Plus interactive security assessment (39 verticals, 845 checks).
Translation pending
Tor-based HTTPS egress for local AI agents, with anonymous proof-gated access instead of accounts or stable client identities.
A private card collection space designed for iPhone. Organize your bank cards and global accounts with local encryption for secure storage and viewing. QuanCard is now available for public beta via TestFlight.
AI translation
Network threat hunting for Zeek and Suricata logs. Explainable per-host risk scores with evidence chains and MITRE ATT&CK mapping. Reads your logs, never touches your network.
Open tools and reproducible research for AI software security.
CycloneDX and SPDX Software Bills of Materials from pixi.lock
An OpenWrt all-in-one transparent proxy solution: one command installs the sing-box core and the management panel, and you can open it in the browser ready to use.
AI translation
Sessions to the machines you already run, without an agent on them. Recorded, approved, audited.
Open-source and free to use; runs on the player's own machine and displays traces as evidence without making judgments.
AI translation
Flash an ESP32-C5 board from the browser with the firmware that makes it a Kismet capture source for Wi-Fi, Zigbee/Thread and Bluetooth LE advertising.
Self-hosted security operations platform. Threat monitoring, analysis, and automated response with full control over your data.
Auditable TTP extraction, campaign clustering and ACH attribution with confidence grading
A Wazuh alert fires at 3am and your IR playbook is a Markdown doc nobody executes, so steps get skipped and the ticket is a guess. Hotwash makes the same p
Live camera view, event review, montage, timeline, push notifications and a local AI agent for ZoneMinder. Free and open source.
Memory, coordination, verification, and governance across a whole portfolio. We run our own company on it, and we publish the receipts.
The maintained, embeddable security layer for LLM and agent apps, with compliance-grade evidence.
PG1 Threat Intelligence: threat-intelligence tools for AI agents over MCP, A2A and REST, with free wallet, domain and hostname checks and a STIX 2.1 indicator feed paid per call with x402 on Base.
ReARM is a release governance platform: see what's in every release, whether it's cleared to ship functionally and security-wise, and the evidence proving both.
Security monitoring middleware for IChatClient — prompt injection, hallucination, and operational anomaly detection with an embedded dashboard.
Meow - A Clash/mihomo Android client with Flutter UI, powered by meow-rs and lwip-based tun2socks
LongHorn ACS for Counter-Strike 1.6. Download information, exact release hashes, data access, and honest security status.
Deterministic, graph-native threat modeling. Model your real stack, map exposures to MITRE ATT&CK, and produce citable evidence for DORA and NIS2.
Sanitised public demo of a read-only Microsoft 365 security operations console (FastAPI + Graph, 21 collectors). All data is synthetic and machine-verified.
Map Gen AI and Agentic security risks to industry frameworks. Score coverage across EU AI Act, FedRAMP, DORA, NIST, ISO, and 20 more. Submit any standard for automated mapping. Free, open-source, from
La compartimentation de Qubes, pour tout le monde. Des Espaces isolés, une couleur par Espace, aucune expertise requise.
Translation pending
Explainers on DNS-01 validation, wildcard certificates, CNAME delegation, deploy hooks and automated renewal, plus a documentation assistant that runs a local LLM over CertMate's docs. No credentials,
Know when your city is at risk, before an incident becomes an outage.
Scan Claude Code, Codex, Cursor and Gemini CLI logs for leaked API keys. Scrub them. Block the next one.
The open, categorized directory of the web's bots — user agents, IP ranges, and how to verify them.
Check if a photo or video is real by verifying its camera signature and integrity directly in your browser without uploading files
AI summary · website and README
Paste your Wazuh custom rules and decoders and see, in your browser, what wazuh-analysisd 4.14.7 will warn about at load: rules ignored because a parent is missing or loads later, duplicate IDs, stati
Deterministic allow, deny or hold for every agent action over POST /v1/decide. Holds resolve through signed, cost-bound approval tokens; no LLM in the decision path. Validated live: 176 decisions, a 3
Three free checks: a suspicious message or prompt (read in your browser, never sent), a crypto token or wallet address across EVM, Solana, Sui and TRON, and an npm package before you install it. No ac
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Démonstration de détection de fraude en assurance IARD, sur données fictives : règles de scoring, analyse réseau, lecture de rapport de police et dossier de recours. Refonte en cours.
Translation pending
A privacy-preserving JSON-RPC proxy for Ethereum nodes with ZK-proof authentication and hierarchical RBAC.
Privaro keeps your private photos and videos encrypted on your iPhone, behind Face ID and a passcode of its own. No account, nothing uploaded.
Healthcare-ops AI assistant where the harness, not the model, controls access, tools and actions. Role-scoped RAG, confirm-before-execute, audit traces, red-team and model-cost labs. Live demo.
Welcome to the revolutionary video analytics and video management platform. Open, modular, and extensible for everyone, anywhere.
Static-first, explainable PE triage with auto-synthesized YARA rules (never executes samples)
Translation pending
Universal catalog of offline-first defensive cybersecurity plugins, 18 specialist AI agent profiles, and deterministic verification tools for GitHub Copilot, Claude Code, and Codex.
An AI-native correlation engine for enterprise SOC teams featuring global feed coverage, MITRE ATT&CK mapping, STIX 2.1 export, and API-first integration.
AI translation
Identify unknown callers and find the information connected to any phone number, using publicly available data from trusted sources.
Built for safety-critical systems, our Trust Lifecycle Management platform delivers unified cybersecurity for IoT and embedded systems in one framework.
Open mini-CNAPP: code-to-runtime lifecycle graph, Zero-Trust policy (Python + Rego), trace-to-commit
Translation pending
Before an AI agent pays for an API, vet402 buys it with its own money and shows what came back. Grades come only from vet402's own purchases.
Vérifiez les avis de concours, faux virements Mobile Money et faux visas avant d'envoyer votre argent.
Translation pending
A customer's security review is holding up the deal. An AI security engineer finds what an attacker could actually reach and writes the fix; an AI pentester proves it by breaking in. You approve every
Proof of Capture on TON — verified photos & videos with on-chain authenticity
Translation pending
Automatic protection against ransomware, human error and hardware failure. Your bucket, your keys. US$5 per server per month.
Prismo is a simple, open-source NFC/RFID access control system for hackerspaces and makerspaces. Control doors and machines with easy-to-build hardware and free software.
Read-only attack-path reasoning and remediation prioritisation over scanner, identity and exploit-intel data
Translation pending
A local-first security gateway for Claude Code and OpenAI-compatible coding agents. One Rust binary on 127.0.0.1: private keys and seed phrases redacted outbound, dangerous tool calls blocked inbound.
Find security regressions, secrets, dead code, and risky AI changes before merge. Run Skylos locally or enforce pull request gates with Cloud.
Guardbee scans your websites with AI, reports risk in business language, and BeeAI delivers on-the-spot fixes. 14-day free trial. Plans from $30/month.
Internet Identity is the authentication service on ICP enabling real privacy, with quick, safe and hassle-free sign-in
OWASP Coraza is an open source, enterprise-grade, high performance Web Application Firewall designed for APIs and web applications — from legacy to modern.
x402 risk-check provider: signed pre-payment verdicts — OFAC, phishing feeds, transaction simulation, drainer-kit code, and our own EIP-7702 kit watch (poisoners, sweepers). $0.001 per check with prep
Run the OpenID Connect conformance tests and read their logs
The menu-bar radar for runaway, leaking and forgotten processes on your Mac. Free, open source, offline.
PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.
Your own model checks a draft report against the code it cites and returns one verdict: submit, rewrite then submit, prove first, hold as a duplicate, or drop.
The enterprise-class Open Source LDAP server for Linux
A local-first workbench for OpenAI Codex Security: run, inspect, compare and govern AI-assisted security scans without losing the evidence, cost and
Download the DuckDuckGo browser to search and browse more privately. Available for Windows, Mac, iOS, and Android.
MSP Atlas: self-hosted IT documentation and an encrypted password vault for managed service providers, with per-client access and a read-only client portal.
AtlaSent protects consequential actions by people, software and AI: an enforceable decision before the action runs, and proof of what was decided and what happened after.
Share encrypted secrets with your team. The server never sees a value.
Secure Java applications with pac4j: authentication and authorization with OpenID Connect, SAML, CAS, OAuth and JWT across Spring Boot and other frameworks.
KiberOgoh UZ is a national cyber shield platform at the mahalla level. It protects citizens from online fraud and cyber threats.
AI translation
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configur
Xencodes is a virtual SMS verification platform. Search for the service you need, choose a country, and get a virtual number that receives your SMS verification code in seconds. Pay as you go in NGN,
Give your AI a passport: a name any wallet can read and a track record anyone can check. Your AI's first one is free.
Hawkeye Sterling — AML/CFT entity risk assessment for dealers in precious metals and stones: structured 0–30 risk scoring, CDD/SDD/EDD verdicts, on-device register and hash-chained audit log. All data
Document-based age verification for online platforms with white-label flows, privacy-first by design, fair billing, and seamless integration via API or packages.
Train your team to spot phishing before attackers do. Realistic simulations, real-time risk analytics, and one-click compliance reporting.
Council of AI is an independent AI-measurement body. Explore the current GSPC measurements, read the change record, verify signed evidence, use the feeds.
Manage, update, and secure all your devices like it's 2026
A digital security agent via WhatsApp. Links, CBU/CVU, phone numbers, emails, and files are analyzed in minutes.
AI translation
Check scam messages, fake job offers, links, phone numbers and UPI QR codes for free. Made in India.
Check emails and URLs instantly. Detect phishing, fake addresses, and malware domains — free, no signup.
Translation pending
Embrace a proactive approach with end-to-end cyber threat management, from anticipation to response.
Encryption hides what a message says. SentinelSpread also hides that it was sent: AES-256-GCM, a real GNU Radio spread-spectrum link, and steganography in ordinary images and audio. 20 working tools.
보이스피싱이 의심되는 통화를 AI가 실시간으로 들으며 위험을 감지하고, 판단을 잠시 멈춘 뒤 객관적 검증과 심리적 안정을 함께 돕습니다.
Translation pending
Static OAuth redirect relay that lets a self-hosted FiestaBoard on a home network complete sign-in. Served at fiestaboard.app/auth.
Translation pending
Paste AI-generated text, see the invisible characters hidden in it, and copy a clean version. Runs entirely in your browser.
Built it? Time to show it.
One command in your project folder. Built with AI is enough; AI features are optional.
/nomorevibeSee how to list