Free security check for AI-built apps (Lovable, Replit, Bolt, v0, Cursor). No sign-up, no login. Paste a public GitHub link for a plain-English graded report.
翻译准备中
安全项目
正在加载…
安全项目
在代码仓库中发现AI编程工具痕迹的公开项目，按最近收录排序。
安全 · 981个项目清除筛选
SealMyApp checks apps built with Lovable, Bolt, Cursor, Replit and v0 for open databases, leaked keys and exposed files, then gives you copy-paste fixes for your builder and keeps watching.
翻译准备中
STIG AMI and CIS hardened AMI images for AWS. Published OpenSCAP scores on x86_64 and arm64.
翻译准备中
Open-source network discovery, observability, camera and WiFi workflows, and edge lifecycle management.
翻译准备中
Hand context between agents — files, prompts and decisions — with a trust boundary that survives the hop.
翻译准备中
A video-meeting authentication portal supporting both 8x8 JaaS and self-hosted Jitsi Meet. Multiple accounts / roles / 2FA, full audit logging, scheduling and email invitations — self-hostable and ful
翻译准备中
Fournisseur Conforme — auto-diagnostic cybersécurité pour fournisseurs et prestataires : évaluez vos pratiques face au projet de référentiel ReCyF v2.5 (version de travail ANSSI) et repartez avec des
翻译准备中
DEVADARA is an offline Windows antivirus that defends your computer the way your body defends itself.
翻译准备中
Your leases, contracts and invoices, read and checked by Yomizaka: every finding quotes its rule and the line it rests on, every PDF examined for signs of editing, every document found again in a seco
翻译准备中
QtPass is a free, open-source GUI for pass, the Unix password manager: GnuPG-encrypted passwords synced with Git on Linux, Windows, macOS and BSD.
翻译准备中
Optics maps every AI process and every connection it makes, flags the first time AI reaches somewhere new, and sends it to the monitoring tools your team already watches. It sees the connection, not t
翻译准备中
VEXORA (Explainable Fund-Flow Tracing for Fraud Detection): follows funds within a bank, flags potentially suspicious transfers and builds one case for the investigator. All data synthetic.
翻译准备中
Vettalon 用多個 AI 模型交叉覆核程式碼風險，保留候選與反證供人工判斷。掃描由本機編排；深掃會將選取的程式碼與上下文送到你設定的模型。免費核心提供供應鏈獵捕，Pro 提供企業報告與桌面 App。
翻译准备中
Quantsiv finds the cryptography in your code that a future quantum computer could break, shows what to fix first based on how long your data must stay secret, and produces the Cryptographic Bill of Ma
翻译准备中
Encrypted legacy vault. Store messages, passwords and documents, pass them to people you choose only when it's truly time.
翻译准备中
Protect your Node.js projects from supply chain attacks. Scan npm packages for malware, crypto-drainers, and security vulnerabilities with AI-powered threat intelligence.
翻译准备中
Self-hosted OAuth 2.1 for your apps, APIs, and AI agents. On-behalf-of delegation, MCP support, and a crypto-agile core built for post-quantum security.
翻译准备中
One-time keys for an ordinary Safe: a seat that keeps its place among the owners while the key behind it changes after every approval. Your passkey plays the key. Base Sepolia only.
翻译准备中
Secure DevOps workflows with Smallstep. Automate trust and integrate device identity across DevOps pipelines for enhanced security.
翻译准备中
An open specification and tools for verifying the provenance of scientific detector data, including images, movies, and spectra, using signatures made inside the detector.
翻译准备中
RouteGate is an open-source self-hosted platform for managed VPN nodes, accounts, devices, routing, and client access.
翻译准备中
Encrypted in your browser, stored as an Arkiv entity, deleted by the protocol. The key never leaves the link.
翻译准备中
The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving towar
翻译准备中
Class action settlements, tracking protection, automatic cookie banner handling and global VPN locations in one app.
翻译准备中
Manage ISO 27001 compliance end-to-end. Gap tracking, risk register, evidence automation, and 29 regulatory framework assessments — self-hosted, open source. Multi-jurisdiction policy rendering for 8
翻译准备中
Surf the internet from home, anywhere in the world! Fully managed, Zero trust VPN for your home or small office network.
翻译准备中
Let Claude Code use your passwords and API keys without ever being handed them. Free, open source, Windows.
翻译准备中
Live CVE tracking across leading cybersecurity vendors — Fortinet, Palo Alto Networks, Cisco, Check Point and more — broken down by firewall, endpoint, SASE and identity products.
翻译准备中
Run Claude Code, Codex or pi in a secure Linux VM on your Mac. Your API keys never enter the sandbox, every connection follows your policy, and it pauses in 1 ms and wakes in 0.3 s.
翻译准备中
AEGIS Defense: sistema autónomo de ciberdefensa post-cuántica desplegado en producción. No es una librería. No es un concepto. Es defensa activa 24/7.
翻译准备中
See what your Microsoft 365 tenants over-share, how their posture scores and who can spoof their domains, for one environment or a whole client book.
翻译准备中
One package, one sentence to your AI agent, about 20 minutes. Compass runs entirely in your AWS account.
翻译准备中
Slopscale is a fork of headscale, the self-hosted Tailscale control server, that runs one tailnet with an admin console, roles, approval and auditing.
翻译准备中
Keeps the Internet open and your data secure. Top-notch VPN from the creators of the famous ad blocker.
翻译准备中
Get SOC 2, GDPR, HIPAA, and ISO certified with expert guidance and the job done for you. Open-source compliance platform with no vendor lock-in.
翻译准备中
Hybrid Rust/Python security scanners for prompt injection, DLP, PII, and agentic tool risks — a layered, on-device AI firewall library.
翻译准备中
One static agent for Windows, macOS and Linux. Inventory, posture, compliance, policies, deployment and remote actions, with a public roadmap to native MDM.
翻译准备中
An open-source, large-scale, full packet capturing, indexing, and database system. Stop using slow tools to dissect and search your packets, let Arkime do the grunt work for you!
翻译准备中
From shadow AI to signed evidence. Discover, sign, and hand the auditor a bundle they can verify themselves.
翻译准备中
A person signs the permission with a passkey. The agent signs a receipt for each action. A free checker says whether the agent stayed within the permission, and where it did not.
翻译准备中
Your AI agent says it did the right thing. Deedglass checks if it really did, and stops it if it didn't. Free to run on your own servers.
翻译准备中
Checks AI-generated code before it merges: security rules, SARIF output for GitHub code scanning, and a CI gate that exits 1 on HIGH findings. Open-source core (MIT).
翻译准备中
Discover your AI agent's attack surface — capabilities, tool permissions, MCP integrations, and prompt risks — with clear, actionable findings before deployment. Free, offline, open-source.
翻译准备中
Corgea finds, triages, and fixes vulnerabilities across code, packages, infrastructure, and containers.
翻译准备中
Trust that travels with your data. Every signature, AI action, and file carries its own proof — so anyone who asks can verify what happened, anywhere.
翻译准备中
A modern GUI client based on Tauri, designed to run in Windows, macOS and Linux for tailored proxy experience
翻译准备中
Protect your SIP Servers from bad actors at https://sentrypeer.org
翻译准备中
Secrets Bridge adds access requests, approvals, audit and agent execution around the secrets you keep in AWS Secrets Manager and HashiCorp Vault. Values stay in your provider.
翻译准备中
A self-hosted gateway that checks, limits, masks and audits every statement before it reaches your production database.
翻译准备中
One goal becomes a governed, audited plan. Your deployment's rules can veto it; the record survives root access. Apache 2.0.
翻译准备中
A free, native Mac app for API keys, .env variables and recovery codes. Encrypted on your Mac and opened with Touch ID.
翻译准备中
One audited Postgres base mapped to SOC 2, HIPAA, ISO 27001, and NIST 800-53: fail-closed RLS, S3 Object-Lock WORM, and an append-only audit chain, in five composable module families you compose, neve
翻译准备中
A live-fire range where anyone can try to rob an AI agent's wallet. Breach it and the contract pays you; fail and the agent's on-chain score — and spending limit — goes up. Settled in USDC on Arc.
翻译准备中
Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure
翻译准备中
Claude Code, Codex and Cursor ask Paveo before they run a shell command or write a file. The dangerous ones are refused, with a record your security team can verify.
翻译准备中
Screen names against signed sanctions data in your browser. No account or backend required.
翻译准备中
Prompt injection detection for autonomous agents. Seven technique classes. Sub-10ms response. Open source.
翻译准备中
Не работает Telegram, WhatsApp, YouTube? Бесплатный прокси за 10 секунд и VPN для обхода глушилок и белых списков. МТС, МегаФон, Tele2, Билайн, Yota.
翻译准备中
Three open-source layers: fence the OS with NockLock, firewall the tools with NockGuard, view configured audit records on the Wall.
翻译准备中
A spend firewall for AI agents: every payment is checked against the job before money moves. Right payee, right amount, in scope, plus a verified-payee credential read — one call returns GO or STOP wi
翻译准备中
Detect attackers while they're still mapping your APIs. trappsec embeds decoy routes and honey fields directly in your application code — catching adversaries before a single perimeter is crossed.
翻译准备中
Recevez vos SMS en ligne avec un numéro virtuel : créez un compte WhatsApp, TikTok ou Telegram sans puce. Validation SMS instantanée, paiement Mobile Money en FCFA.
翻译准备中
Stars is an AGPL-3.0 Windows permission analysis tool for Active Directory, NTFS and SMB effective permissions with explainable permission paths. Read-only, open source, free.
翻译准备中
RustyMap è un port di nmap scritto in Rust: scan TCP/UDP, evasione firewall, OS fingerprinting, idle scan e molto altro.
翻译准备中
Open-source agent that detects attacks in your server logs and inbound connections, bans attackers at the firewall, checks hardening, scans code and spot-checks your URLs — with alerts and a cloud das
翻译准备中
Ambit 是一个自托管网关，决定谁可以使用哪些 AI 模型和工作应用，设置支出上限，保留审计记录，并在人员离职时移除访问权限。
AI 翻译
TrustLight: a light you can trust. Free scam checker for links, messages, QR codes, numbers and files, in English, Hindi, Kannada and Tulu.
翻译准备中
An expiring issuing CA takes down everything it ever signed. CertPilot watches authorities first.
翻译准备中
SyncPass, şifrelerinizi, kartlarınızı ve 2FA kodlarınızı cihazınızda şifreli tutan şifre yöneticisidir. Hesap açmanız gerekmez; ana parolanızı bizimle paylaşmazsınız.
翻译准备中
MCP gateway between AI agents and their tools, the web and Matrix: three-layer prompt-injection defense, smaller tool lists and responses, gateway-enforced parameter and response guards, OAuth/DCR, an
翻译准备中
mdoc is a free, open-source desktop app for Mac and Windows. Open PDFs, scans and Word files, check them against the original, replace client names, and copy clean text into ChatGPT or Claude.
翻译准备中
Deep คือระบบสร้างความน่าเชื่อถือสำหรับการซื้อขายออนไลน์ ผ่านการยืนยันตัวตน Trust Score และ Badge เพื่อลดปัญหามิจฉาชีพ
翻译准备中
3 дня бесплатно на VLESS Reality. Проверь скорость и стабильность — если зайдёт, оформи подписку в Telegram-боте.
翻译准备中
Network toolkit with 17+ engines, MCP server for AI integration, smart config rotation, data-phase drop detection, and country-aware routing. Terminal-first. Windows + Linux
翻译准备中
Watch your cameras from anywhere while recordings stay on your own hardware. Open source, encrypted at rest, AI only if you turn it on.
翻译准备中
Stop AI agents losing money on Solana: pre-sign checks, intent matching, token verdicts. MCP and HTTP, x402 USDC.
翻译准备中
Get the IAM policy a CloudFormation or SAM stack needs from its template, before you deploy it.
翻译准备中
What clearcutt-verify found and proved about the northcutted-images image estate.
翻译准备中
Custom Flipper Zero firmware: Flipper-ARF protocols + custom UI. (The web flasher is not working and it has many bugs, will try to fix it in future but for now main focus is firmware itself.)
翻译准备中
AI-assisted control mapping prototype for a fictional organization. AI suggests, code calculates, the analyst decides.
翻译准备中
Lets you connect your accounts once and give each AI agent limited, logged access to them
翻译准备中
AI 摘要 · 审核时修订
Browse 601+ production-ready Open Policy Agent (OPA) Rego policies by standard: CIS Benchmarks, DISA STIGs, NIST, NERC-CIP, IEC 62443, ISO 27001, SOC 2, PCI-DSS, EU AI Act and 55+ frameworks. Apache 2
翻译准备中
Frosts the screen when you stop using the Mac, and clears it the moment a hand comes back.
翻译准备中
Solana forensic scanner. Token X-Ray traces the deployer, the launch block and every authority; Wallet Shield revokes drainer approvals in one click. Powered by Predator AI.
翻译准备中
Persistent, signed, on-chain-anchored memory your AI agents can carry across providers, sessions, and tools — and any third party can verify.
翻译准备中
Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
翻译准备中
Auditable AI patch triage: deterministic exploitation signals (EPSS/KEV/SSVC) in, machine-verified LLM decisions out
翻译准备中
Passive detection of AI agent activity in public records: the method walked through a synthetic incident, notices, and browser tools.
翻译准备中
Deploy the latest version of Wazuh Server as a Kubernetes Operator on any cloud. A charm deploying the Wazuh Server.
翻译准备中
TraceRook 在运行前阻止有风险的 Claude 代码操作。Mac 本地规则、Anthropic Claude 情境分析，以及对每个高风险调用的原生审查。
AI 翻译
Backups for your Mac that keep every version, encrypted, to a drive, a NAS, a cloud folder or S3. Free and open source.
翻译准备中
Self-hosted threat-intel dashboard on a Raspberry Pi: security news with CVE lookups, CISA exploitation flags, and colour-coded severity.
翻译准备中
Android navigation that avoids the fields of view of mapped ALPR cameras — the 139,391 of the 142,257 in the 50 states and DC whose facing is recorded — routed offline, so your start and destination s
翻译准备中
Android app that flags AirTags, Tile, SmartTags & Find My trackers travelling WITH you over time, plus an experimental detector for key-rotating clones. Fully offline, no internet permission.
翻译准备中
Recon and hunting for authorized security testing, with hash-chained evidence and human-signed receipts for every lane.
翻译准备中
A simple, self-hosted, web-based IP Address Lookup Tool written using Flask (Python), packaged using Docker Compose for a quick and easy deployment
翻译准备中
Highflame is the AI agent security platform: a verifiable identity for every agent and an authorization decision for every action, enforced inline across LLM and MCP traffic.
翻译准备中
Pre-execution verification for AI agents. SATISFIED, UNSATISFIED, or UNKNOWN. Current release: v1.23.1.
翻译准备中
A simple, self-hosted, web-based Bulk Password Generator written using Flask (Python), packaged using Docker Compose for a quick and easy deployment
翻译准备中
Free password generator. Make strong passwords, PINs and passphrases with custom length and symbols. Everything happens in your browser, nothing is sent or stored.
翻译准备中
Map what your infrastructure agent can change in production, whether each change can be undone, and when a person must approve. Storage first.
翻译准备中
ランサムウェアのふるまい検知＆エアギャップ隔離、公衆Wi-Fiでの盗聴対策、不正USB/BadUSB物理ポートガードを1つのメニューバーアプリに。自宅でも外出先でも、複雑な設定なしで自律防御。
翻译准备中
Generate threat models from system descriptions using LLMs with iterative review
翻译准备中
AI 摘要 · README
Run schema-validated bundled Network replays in an ephemeral workbench. No decisions are recorded, and ChangeSafe never executes infrastructure changes.
翻译准备中
Open-source team mesh control. Self-host a console on Headscale — no per-seat lock-in. Workspaces, tags, keys, and Network Apps. Official Tailscale clients only.
翻译准备中
Signed receipts for AI responses, anchored on Monad. It proves who served which bytes and what they claimed, not which weights ran.
翻译准备中
Alias sostituisce nomi, codici fiscali e IBAN prima che la richiesta arrivi al modello di AI, e rimette i dati veri nella risposta. Per studi professionali e PMI.
翻译准备中
One command to install. Gives people one link to all your servers, serves a cover site on every server and watches their health. Open source.
翻译准备中
AVA（AnotherVaporAuth），用 Flutter 重写的多平台 Steam 令牌验证器。支持验证码、交易确认和扫码登录，密钥保存在本机。
AeroPad is a local-first 2FA & security workbench with an encrypted-at-rest TOTP vault, QR import/generation, secure notes, encrypted .aeropad backups, strict WebCrypto validation, self-hosted/offline
翻译准备中
Verify what is exposed, what changed, what acted, and what the evidence actually supports.
翻译准备中
Bounded unauthenticated external exposure scan. Check public files, security headers, certificate evidence, CORS, and optional takeover risk.
翻译准备中
See if your unshield amount links your withdrawal to the deposit address. Free and open source. The check runs in your browser.
翻译准备中
EDEP ist ein offener, prüfbarer Sicherheitsstandard für Windows: ausgehender Verkehr nur für zugelassene Programme, Telemetrie auf das Minimum, jede Blockade protokolliert. Mit kostenlosem Audit-Tool.
翻译准备中
Apna Business Cloud, India me safe. Team backup and vault for Indian companies — Bharat Tijori.
翻译准备中
Agent Sentinel is a local flight recorder and execution boundary for AI coding agents. It blocks dangerous commands, asks you before risky ones, and records everything. One binary, no cloud, no accoun
翻译准备中
Dormathon 2026, Track 1 (Predictive Model): Scam Guardian, a wallet demo that pauses risky transfers when someone may be coached by a scammer. Expo, Android and Web.
翻译准备中
241 domain tools across 35 vendor integrations and CMVP, KEV, EPSS, FedRAMP, SCF, and OSCAL, with Pi, Cursor Agent SDK, and Flue runtime paths.
翻译准备中
Android app that flags nearby Flock ALPRs, Axon body cams, and police by fusing BLE/WiFi + the DeFlock map + Waze police reports. It never connects to, pairs with, or jams anything it detects.
翻译准备中
An independently-enforced Go trust-kernel, egress lockdown, and CI that runs against live infrastructure — the same NanoClaw experience, secured underneath.
翻译准备中
Assess the risk to your organisation's crown jewels in Microsoft 365, Google Workspace or AWS and download a branded PDF report. Runs entirely in your browser.
翻译准备中
Kwetsbaarheden Analyse Tool, openkat.nl.
翻译准备中
Runtime leak detector for modern web apps — finds exposed API keys, validates BaaS misconfigurations (Supabase/Firebase RLS), and catches secrets in JS bundles. Chrome extension + CLI.
翻译准备中
Explore remote monitoring and management tools, forensic artifacts, and detections. Open source intelligence for threat hunters and defenders.
翻译准备中
Generate least-privilege Claude Code permission rules for MCP tools from their live annotations: readOnlyHint tools go to allow, everything else to ask, one mcp__server__tool rule each, never a glob.
翻译准备中
CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers and secret-shaped st
翻译准备中
Pensar is a continuous adversarial testing platform: offensive AI agents attack your live systems, prove real exploits, and re-attack every fix until it holds.
翻译准备中
Claude Code permission rule simulator: load the merged allow, ask and deny settings, show which rule decides any tool call, and find the bypasses: commands that slip past a Bash pattern, paths that es
翻译准备中
Run Claude Code, Codex or pi in a secure Linux VM on your Mac. Your API keys never enter the sandbox, every connection follows your policy, and it pauses in 1 ms and wakes in 0.3 s.
翻译准备中
AgentGuard is an open-source runtime firewall for AI agents. Wire-level enforcement at the protocol boundary — an MCP gateway and an LLM API proxy — with policy-as-code in YAML, human-in-the-loop appr
翻译准备中
Proxed.AI is the simplest way to protect AI API keys in iOS apps. Lock down your API credentials, verify device authenticity with Apple's DeviceCheck, and structure AI outputs—all without a backend. O
翻译准备中
CaMeL-style control/data-flow separation that reduces injection-to-effect risk under stated assumptions. Topology, not a safety certificate.
翻译准备中
A security incident-response console: detections become diagnoses, diagnoses are challenged by evidence, and every response is scored and tiered before anyone acts.
翻译准备中
Every AI employee. One workplace. Connect the bots you already run, set what they may do, and approve anything risky.
翻译准备中
Cartographier les liens entre sociétés, dirigeants, adresses, événements juridiques et sanctions — avec niveau de preuve (confirmé, déclaré, inféré, simulé).
翻译准备中
Open-source security tooling built by VardrSec: API authorization testing, attack surface mapping, and local scan automation.
翻译准备中
Explore an extensive range of use cases supported by Fingerprint, and learn how to successfully implement it for your business with practical guidance and a comprehensive demo.
翻译准备中
Every LLM interaction. Logged. Immutable. Attributed. Human-directed AI assistance with deterministic governance for chat and MCP tool calls. What Is LLM Provost? LLM Provost is a complete enterprise
翻译准备中
Authentication, validation, fraud detection, payments intelligence, and global data, delivered through one unified API.
翻译准备中
JumpServer 是广受欢迎的开源堡垒机与运维安全审计平台，支持主机、数据库、Kubernetes、RemoteApp 等资产统一纳管，覆盖 4A、PAM、数据库审计与合规场景。
Free, open-source, local-first scanner and integrity monitor for OpenClaw skills. npx ironheights scan ./skill
翻译准备中
Blur unregistered faces in your live stream with InnoLive's real-time AI de-identification. Keep registered participants visible and try face privacy protection in your browser.
翻译准备中
做出来了，现在该展示了。
在项目文件夹中执行一条命令即可。只要由AI辅助制作，就不必具备AI功能。
/nomorevibe查看收录流程