ProofAPI seals every AI decision on Solana. Anyone can check it with a link, without trusting the operator.
Security projects
Loading…
Security projects
Public projects with traces of AI coding tools in their repositories, sorted by newest listing.
Security · 1,313 projectsReset filters
Stenwatch is a free, open-source tool that narrows every public software flaw to the few that matter to your organisation, with a plain reason for each one.
Jentic is a sovereign agent operating system. Your people and your agents work side by side, and the knowledge they create compounds into something you own.
Understand what is publicly discoverable about your website.
Browse powerful, production-ready open-source libraries created to help developers build faster and integrate features with ease.
Find the round trips, quick exits and fingerprint amounts that link your shielded Zcash activity, and check a withdrawal before you make it.
A free, privacy-first relay network that helps you reach the open internet. Open source and nonprofit-run.
Free Mac app that shows what your AI coding tools installed, checks their settings for problems, and tells you what's safe to clean up. It only looks.
Code checks 500 certificates exactly, Jev reads the ticket and judges only the few that matter, and a fixed policy decides. Every input, output and cent is shown.
Mailprogramm, Mailserver, SSH-Client, Remotedesktop, Passwortmanager mit eigenem Server, Editor und Bildschirmspiegeln: Open Source, ohne Telemetrie, mit Nyu der Katze. Ein Hobbyprojekt von Streamer M
Translation pending
BlindHop mixnet privacy layer for Substrate light clients. Toggle between direct, fast, and full metadata privacy modes. No setup required — runs in your browser.
SSO, MFA, passkeys, RBAC, and session management — built for developers, trusted by enterprises.
The Qeet ID console for identity, authentication, authorization, and security operations.
AI translation
Subdomain enumeration you can trust. subenum classifies every DNS lookup, grades the run complete, degraded or unreliable, and ships as a single static Go binary.
Govern what context, models, and tools AI agents may use.
Keep all your devices protected with Blokada content filtering and encryption.
One control room over open agent governance, running on your own infrastructure: per-action passkey kill switch, WireGuard remote, post-quantum signatures, and a local-first AI copilot. Apache-2.0, se
AI governance software covering 30+ frameworks: EU AI Act, ISO 42001, NIST AI RMF, GDPR. Inventory, risk, policy, evidence, LLM evaluation.
Translation pending
Find what your app accidentally exposed. Free, read-only scan of your live site. No signup.
Translation pending
Docudis finds names, emails, phone numbers, IBANs and addresses in your documents and replaces them with labels, on your phone, before you send them to an AI.
MITM proxy for reverse engineering — LLM-ready output, multi-language codegen, sign algorithm inference, request replay, plugin system, native desktop GUI (Wails + Svelte)
Translation pending
Research • Tools • OSINT • AI. Инструменты, исследования и инженерный процесс.
Translation pending
Unofficial MCP server for the Sophos Fusion and Sophos Central APIs. Not a Sophos product and not supported by Sophos. 310 tools across 22 API namespaces, as a Claude Desktop extension or via npx.
Rapid7 Bulk Export MCP - AI-powered analysis for Rapid7 Command Platform data using MCP (Model Context Protocol) & AgentSkills.
Large Language Model (LLM) information redactor that prevents private information from being sent to LLMs from agentic tools by substituting placeholders for private information on outgoing requests a
Sequent is the world’s first online voting platform to ensure the highest level of confidence in elections for voters, election managers, and auditors
Vanity address mint for EVM and TRON. You make half the key on your own computer, we mint the other half on GPUs, and only you can put the full private key together.
One sealed envelope per person: a letter and the passwords they need, encrypted on your phone, opened only after months of silence. Open source, not audited.
Open-source CPG-based interprocedural taint analysis + LLM triage, with a Ghidra-style audit workbench. Runs fully offline.
AI Agent permission enforcement and sandbox security SDK, extracted from claw-code
Inspect SM2 signatures, ciphertext layouts, and nonce-reuse recovery in a browser.
Translation pending
AI IDE security hook: blocks directories, scans secrets, and protects AI interactions
Translation pending
Open-source crates for the Enclavia enclave runtime: in-enclave services, shared protocol types, client SDK, CLI. Dual-licensed Apache-2.0/MIT.
cMCP: Confidential MCP Gateway. Hardware-attested policy enforcement for MCP tool calls.
Translation pending
Klickbarer Prototyp: Pendelströme Konstanz–Kreuzlingen gemeinsam berechnen, ohne Rohdaten herzugeben (MPC, PSI, Differential Privacy) – mit Testdaten.
Translation pending
You can't govern what you can't see. Role mining and analytics that make sense of your authorization data — open source, self-hosted, your identity data never leaves your environment.
Verify two deployed randomness beacons from their real outputs: NIST Beacon 2.0 pulses (SHA-512 hash chain, skiplist, precommitment, RSA signature) and drand League of Entropy rounds (threshold BLS si
Check a sender address or a full email for phishing signals, with each finding explained. PhishGuard’s scores are heuristic evidence, not a guarantee of safety.
Truly redact PDFs in your own browser. Text is removed from the file, not covered with a black box, and your document is never uploaded.
Client-side visual analyzer for iptables, ip6tables, nftables and ufw rulesets — paste the output, see the structure.
Security checks agents can call: MCP manifest preflight, source-pattern scanning and injection screening, with signed redacted receipts.
Browse, search, and explore all Microsoft Intune Settings Catalog definitions — fast, and without needing Intune access.
Translation pending
Establish trust on every request. Welcome real users and AI agents, stop abusive bots — GDPR-compliant, risk-based verification that minimises friction.
13 specialized AI agents, 30+ MCP integrations, 7,200+ detection rules. Apache 2.0. Local-first.
Translation pending
Live demo of the Risk, Fraud & Regulatory Intelligence Copilot. Runs in your browser with fake sample data; no Snowflake, no AI call.
AI-control monitors for LangChain agents and Deep Agents: every step an agent proposes is judged before any of its own tools run, and a control protocol decides what runs.
Provenance-graph attack reconstruction from eBPF / Sysmon / auditd telemetry
Translation pending
Локальный AI-ассистент для аудита безопасности кода на Python, JavaScript/TypeScript и Go: находит уязвимости, классифицирует по CWE и OWASP Top 10 и предлагает проверенные исправления.
Translation pending
Sample-to-story malware analysis pipeline (lab-only, never executes samples)
Translation pending
shard-core combines ChaCha20-Poly1305 with Shamir key sharing, resilient recovery, explicit secret output, Fordefi phrase workflows, and a verified offline build path.
From generation to distribution. Generate, manage, and share SBOMs and compliance documents. Integrate with GitHub, GitLab, and more. CRA & NTIA compliant.
XTM Hub is your gateway to Filigran's cybersecurity solutions.
Sealed evidence, reconstructed attack chains and the exact log line behind every finding, for Claude Code, Codex, Cursor, Gemini, Copilot and more. Open source.
v7.0: 4 lenses × 4 mindsets + consensus scoring. 90% precision, free. Plus interactive security assessment (39 verticals, 845 checks).
Translation pending
Tor-based HTTPS egress for local AI agents, with anonymous proof-gated access instead of accounts or stable client identities.
A private card collection space designed for iPhone. Organize your bank cards and global accounts with local encryption for secure storage and viewing. QuanCard is now available for public beta via TestFlight.
AI translation
Network threat hunting for Zeek and Suricata logs. Explainable per-host risk scores with evidence chains and MITRE ATT&CK mapping. Reads your logs, never touches your network.
Open tools and reproducible research for AI software security.
CycloneDX and SPDX Software Bills of Materials from pixi.lock
An OpenWrt all-in-one transparent proxy solution: one command installs the sing-box core and the management panel, and you can open it in the browser ready to use.
AI translation
Sessions to the machines you already run, without an agent on them. Recorded, approved, audited.
Open-source and free to use; runs on the player's own machine and displays traces as evidence without making judgments.
AI translation
Flash an ESP32-C5 board from the browser with the firmware that makes it a Kismet capture source for Wi-Fi, Zigbee/Thread and Bluetooth LE advertising.
Self-hosted security operations platform. Threat monitoring, analysis, and automated response with full control over your data.
Auditable TTP extraction, campaign clustering and ACH attribution with confidence grading
A Wazuh alert fires at 3am and your IR playbook is a Markdown doc nobody executes, so steps get skipped and the ticket is a guess. Hotwash makes the same p
Live camera view, event review, montage, timeline, push notifications and a local AI agent for ZoneMinder. Free and open source.
Memory, coordination, verification, and governance across a whole portfolio. We run our own company on it, and we publish the receipts.
The maintained, embeddable security layer for LLM and agent apps, with compliance-grade evidence.
PG1 Threat Intelligence: threat-intelligence tools for AI agents over MCP, A2A and REST, with free wallet, domain and hostname checks and a STIX 2.1 indicator feed paid per call with x402 on Base.
ReARM is a release governance platform: see what's in every release, whether it's cleared to ship functionally and security-wise, and the evidence proving both.
Security monitoring middleware for IChatClient — prompt injection, hallucination, and operational anomaly detection with an embedded dashboard.
Meow - A Clash/mihomo Android client with Flutter UI, powered by meow-rs and lwip-based tun2socks
LongHorn ACS for Counter-Strike 1.6. Download information, exact release hashes, data access, and honest security status.
Deterministic, graph-native threat modeling. Model your real stack, map exposures to MITRE ATT&CK, and produce citable evidence for DORA and NIS2.
Sanitised public demo of a read-only Microsoft 365 security operations console (FastAPI + Graph, 21 collectors). All data is synthetic and machine-verified.
Map Gen AI and Agentic security risks to industry frameworks. Score coverage across EU AI Act, FedRAMP, DORA, NIST, ISO, and 20 more. Submit any standard for automated mapping. Free, open-source, from
La compartimentation de Qubes, pour tout le monde. Des Espaces isolés, une couleur par Espace, aucune expertise requise.
Translation pending
Explainers on DNS-01 validation, wildcard certificates, CNAME delegation, deploy hooks and automated renewal, plus a documentation assistant that runs a local LLM over CertMate's docs. No credentials,
Know when your city is at risk, before an incident becomes an outage.
Scan Claude Code, Codex, Cursor and Gemini CLI logs for leaked API keys. Scrub them. Block the next one.
The open, categorized directory of the web's bots — user agents, IP ranges, and how to verify them.
Check if a photo or video is real by verifying its camera signature and integrity directly in your browser without uploading files
AI summary · website and README
Paste your Wazuh custom rules and decoders and see, in your browser, what wazuh-analysisd 4.14.7 will warn about at load: rules ignored because a parent is missing or loads later, duplicate IDs, stati
Deterministic allow, deny or hold for every agent action over POST /v1/decide. Holds resolve through signed, cost-bound approval tokens; no LLM in the decision path. Validated live: 176 decisions, a 3
Three free checks: a suspicious message or prompt (read in your browser, never sent), a crypto token or wallet address across EVM, Solana, Sui and TRON, and an npm package before you install it. No ac
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Démonstration de détection de fraude en assurance IARD, sur données fictives : règles de scoring, analyse réseau, lecture de rapport de police et dossier de recours. Refonte en cours.
Translation pending
A privacy-preserving JSON-RPC proxy for Ethereum nodes with ZK-proof authentication and hierarchical RBAC.
Privaro keeps your private photos and videos encrypted on your iPhone, behind Face ID and a passcode of its own. No account, nothing uploaded.
Healthcare-ops AI assistant where the harness, not the model, controls access, tools and actions. Role-scoped RAG, confirm-before-execute, audit traces, red-team and model-cost labs. Live demo.
Welcome to the revolutionary video analytics and video management platform. Open, modular, and extensible for everyone, anywhere.
Static-first, explainable PE triage with auto-synthesized YARA rules (never executes samples)
Translation pending
Universal catalog of offline-first defensive cybersecurity plugins, 18 specialist AI agent profiles, and deterministic verification tools for GitHub Copilot, Claude Code, and Codex.
An AI-native correlation engine for enterprise SOC teams featuring global feed coverage, MITRE ATT&CK mapping, STIX 2.1 export, and API-first integration.
AI translation
Identify unknown callers and find the information connected to any phone number, using publicly available data from trusted sources.
Built for safety-critical systems, our Trust Lifecycle Management platform delivers unified cybersecurity for IoT and embedded systems in one framework.
Open mini-CNAPP: code-to-runtime lifecycle graph, Zero-Trust policy (Python + Rego), trace-to-commit
Translation pending
Before an AI agent pays for an API, vet402 buys it with its own money and shows what came back. Grades come only from vet402's own purchases.
Vérifiez les avis de concours, faux virements Mobile Money et faux visas avant d'envoyer votre argent.
Translation pending
A customer's security review is holding up the deal. An AI security engineer finds what an attacker could actually reach and writes the fix; an AI pentester proves it by breaking in. You approve every
Proof of Capture on TON — verified photos & videos with on-chain authenticity
Translation pending
Automatic protection against ransomware, human error and hardware failure. Your bucket, your keys. US$5 per server per month.
Prismo is a simple, open-source NFC/RFID access control system for hackerspaces and makerspaces. Control doors and machines with easy-to-build hardware and free software.
Read-only attack-path reasoning and remediation prioritisation over scanner, identity and exploit-intel data
Translation pending
A local-first security gateway for Claude Code and OpenAI-compatible coding agents. One Rust binary on 127.0.0.1: private keys and seed phrases redacted outbound, dangerous tool calls blocked inbound.
Find security regressions, secrets, dead code, and risky AI changes before merge. Run Skylos locally or enforce pull request gates with Cloud.
Guardbee scans your websites with AI, reports risk in business language, and BeeAI delivers on-the-spot fixes. 14-day free trial. Plans from $30/month.
Internet Identity is the authentication service on ICP enabling real privacy, with quick, safe and hassle-free sign-in
OWASP Coraza is an open source, enterprise-grade, high performance Web Application Firewall designed for APIs and web applications — from legacy to modern.
x402 risk-check provider: signed pre-payment verdicts — OFAC, phishing feeds, transaction simulation, drainer-kit code, and our own EIP-7702 kit watch (poisoners, sweepers). $0.001 per check with prep
Run the OpenID Connect conformance tests and read their logs
The menu-bar radar for runaway, leaking and forgotten processes on your Mac. Free, open source, offline.
PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.
Your own model checks a draft report against the code it cites and returns one verdict: submit, rewrite then submit, prove first, hold as a duplicate, or drop.
The enterprise-class Open Source LDAP server for Linux
A local-first workbench for OpenAI Codex Security: run, inspect, compare and govern AI-assisted security scans without losing the evidence, cost and
Download the DuckDuckGo browser to search and browse more privately. Available for Windows, Mac, iOS, and Android.
MSP Atlas: self-hosted IT documentation and an encrypted password vault for managed service providers, with per-client access and a read-only client portal.
AtlaSent protects consequential actions by people, software and AI: an enforceable decision before the action runs, and proof of what was decided and what happened after.
Share encrypted secrets with your team. The server never sees a value.
Secure Java applications with pac4j: authentication and authorization with OpenID Connect, SAML, CAS, OAuth and JWT across Spring Boot and other frameworks.
KiberOgoh UZ is a national cyber shield platform at the mahalla level. It protects citizens from online fraud and cyber threats.
AI translation
Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configur
Xencodes is a virtual SMS verification platform. Search for the service you need, choose a country, and get a virtual number that receives your SMS verification code in seconds. Pay as you go in NGN,
Give your AI a passport: a name any wallet can read and a track record anyone can check. Your AI's first one is free.
Hawkeye Sterling — AML/CFT entity risk assessment for dealers in precious metals and stones: structured 0–30 risk scoring, CDD/SDD/EDD verdicts, on-device register and hash-chained audit log. All data
Document-based age verification for online platforms with white-label flows, privacy-first by design, fair billing, and seamless integration via API or packages.
Train your team to spot phishing before attackers do. Realistic simulations, real-time risk analytics, and one-click compliance reporting.
Council of AI is an independent AI-measurement body. Explore the current GSPC measurements, read the change record, verify signed evidence, use the feeds.
Manage, update, and secure all your devices like it's 2026
A digital security agent via WhatsApp. Links, CBU/CVU, phone numbers, emails, and files are analyzed in minutes.
AI translation
Check scam messages, fake job offers, links, phone numbers and UPI QR codes for free. Made in India.
Check emails and URLs instantly. Detect phishing, fake addresses, and malware domains — free, no signup.
Translation pending
Embrace a proactive approach with end-to-end cyber threat management, from anticipation to response.
Encryption hides what a message says. SentinelSpread also hides that it was sent: AES-256-GCM, a real GNU Radio spread-spectrum link, and steganography in ordinary images and audio. 20 working tools.
보이스피싱이 의심되는 통화를 AI가 실시간으로 들으며 위험을 감지하고, 판단을 잠시 멈춘 뒤 객관적 검증과 심리적 안정을 함께 돕습니다.
Translation pending
Static OAuth redirect relay that lets a self-hosted FiestaBoard on a home network complete sign-in. Served at fiestaboard.app/auth.
Translation pending
Paste AI-generated text, see the invisible characters hidden in it, and copy a clean version. Runs entirely in your browser.
See how realHuman scores your visit, and help test it.
Check an AI agent endpoint before you call it: a read-only, no-API-key trust check returning a machine-readable trustDecision from observed reliability evidence.
免费检测你的网络出口：注册 Muse 前先看会不会进等候名单；Muse、Claude、ChatGPT、Gemini 各自看到的 IP 在哪、能不能用；住宅还是机房、DNS / WebRTC 有没有泄露、Claude Code 终端走哪个出口。每条问题都写明怎么改，无需登录。
Translation pending
Open-source agentic DFIR. Agents divide the case on a shared board, write their own tools, and leave a hash-chained record you can put in front of a court. Free under the AGPL.
A public welfare project providing free proxy subscription links and VLESS / Shadowsocks nodes for easy copy-and-import use, along with free proxy software downloads and daily news.
AI translation
Nasiko helps enterprises account for what their AI agents cost, can access, and do, across every model and provider.
OSS SIEM + XDR Powered by Threat intelligence and real time correlation. Built for 24x7 Security Operations with Automated Threat Detection and Response
Every MCP tool call journaled with secrets redacted, risky ones held until you approve. Self-hosted, Apache-2.0.
Discover the power of Tyk AI Studio in controlling AI use, ensuring security, and optimizing workflows in your organization.
Your pull request got reviewed; the published tarball did not. Drydock diffs the exact npm, PyPI, or VS Code artifact and pins supply-chain findings to changed lines.
免费开源的 Windows 桌面工具，实时审计 OpenAI Codex 会话：高危命令、凭据访问、提示注入、投毒篡改、中转站偷换模型。只读日志，不代理、不装证书。
Translation pending
Verify Execution Receipts from Axeum Technologies using a receipt ID or public key
AI summary · website and README
Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.
Bitcoin-anchored proof a file existed. The file does not leave your browser.
tweetfeed.live MCP server (CF Worker) - 14 IOC threat-intel tools, 7 resources, 3 prompts, no auth, CC0 data. Endpoint: https://mcp.tweetfeed.live
Translation pending
Live IOC feeds for Threat Intelligence - URLs, domains, IPs, hashes. Real-time Twitter feeds, updated every 15 min.
Translation pending
Runs any program inside namespaces with no network interfaces, no routes, no DNS, plus capability dropping and a seccomp filter blocking network syscalls. Two Go modules, no runtime services.
Deterministic crypto inventory for Python wheels, with FIPS compatibility as one lens over it. It gathers evidence; it does not decide FIPS compliance.
Runs several independent, narrowly focused passes over every source file instead of one general “find bugs” prompt, then merges the results. Every file gets a recorded status and every failed pass is
ArgusAI is an AI-powered event detection system for home security. Analyze video feeds from UniFi Protect, RTSP, and USB cameras with multi-provider AI.
Tracyn records every action your AI agents take, pauses the risky ones for a human, and turns the trail into audit-ready evidence. One decorator to start.
Multi-OS sandbox to run AI agents with better constraints (it is not 100% secure, but enough)
Vault is an open-source iPhone and iPad app for the secrets you can't afford to lose: 2FA codes, private notes and crypto recovery phrases. Fully offline, with encrypted backups and protection for whe
Prove quem envenenou o modelo. Reputação imutável, auditável e sem autoridade central.
Translation pending
OAuth2 goodies for the Djangonauts!
Open-source VPN for speed, privacy, and censorship circumvention. Free to download on Android, iOS, Windows, macOS, and Linux.
OXO is a vulnerability scanning orchestrator that automatically binds tools together allowing for rapid scale.
One read-only query in your Supabase SQL editor. Every open policy, table and function, quoted from your database, with the fix and the undo. Free.
Prismor intercepts every tool call your AI agents make, enforces security policies, and logs a full audit trail. Works with all enterprise AI agents.
District Authorities must physically inspect at least ten percent of works under implementation every year. This ranks the works by risk, so that ten percent is chosen rather than assumed.
Enterprise gateway for git-distributed AI agent skill marketplaces — quarantined ingestion, hold-until-approved vetting, a read-only git facade, and an append-only audit ledger.
An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention.
SIQ Agent Security：面向 Agent Skills 的可信执行安全运行时。Skill 引导接入、本地 Go 程序裁决、宿主钩子执行保护，以 Ed25519 与 SHA-256 绑定授权、参数与回执；0.4.0 签名正式版已发布。
Translation pending
See who your AI talks to and decide who it does not. All on your computer: no account, no server, open source. Windows, Linux and macOS.
Master your digital identity. Switch freely with one click.
Qualified eIDAS proof, open, automatable and protected by intangible statutes. A pilot is already running. White paper under review, call for partners.
AI translation
Built it? Time to show it.
One command in your project folder. Built with AI is enough; AI features are optional.
/nomorevibeSee how to list