Recon and hunting for authorized security testing, with hash-chained evidence and human-signed receipts for every lane.
翻译准备中
安全项目
正在加载…
安全项目
在代码仓库中发现AI编程工具痕迹的公开项目，按最近收录排序。
安全 · 990个项目清除筛选
A simple, self-hosted, web-based IP Address Lookup Tool written using Flask (Python), packaged using Docker Compose for a quick and easy deployment
翻译准备中
Highflame is the AI agent security platform: a verifiable identity for every agent and an authorization decision for every action, enforced inline across LLM and MCP traffic.
翻译准备中
Pre-execution verification for AI agents. SATISFIED, UNSATISFIED, or UNKNOWN. Current release: v1.23.1.
翻译准备中
A simple, self-hosted, web-based Bulk Password Generator written using Flask (Python), packaged using Docker Compose for a quick and easy deployment
翻译准备中
Free password generator. Make strong passwords, PINs and passphrases with custom length and symbols. Everything happens in your browser, nothing is sent or stored.
翻译准备中
Map what your infrastructure agent can change in production, whether each change can be undone, and when a person must approve. Storage first.
翻译准备中
ランサムウェアのふるまい検知＆エアギャップ隔離、公衆Wi-Fiでの盗聴対策、不正USB/BadUSB物理ポートガードを1つのメニューバーアプリに。自宅でも外出先でも、複雑な設定なしで自律防御。
翻译准备中
Generate threat models from system descriptions using LLMs with iterative review
翻译准备中
AI 摘要 · README
Run schema-validated bundled Network replays in an ephemeral workbench. No decisions are recorded, and ChangeSafe never executes infrastructure changes.
翻译准备中
Open-source team mesh control. Self-host a console on Headscale — no per-seat lock-in. Workspaces, tags, keys, and Network Apps. Official Tailscale clients only.
翻译准备中
Signed receipts for AI responses, anchored on Monad. It proves who served which bytes and what they claimed, not which weights ran.
翻译准备中
Alias sostituisce nomi, codici fiscali e IBAN prima che la richiesta arrivi al modello di AI, e rimette i dati veri nella risposta. Per studi professionali e PMI.
翻译准备中
One command to install. Gives people one link to all your servers, serves a cover site on every server and watches their health. Open source.
翻译准备中
AVA（AnotherVaporAuth），用 Flutter 重写的多平台 Steam 令牌验证器。支持验证码、交易确认和扫码登录，密钥保存在本机。
AeroPad is a local-first 2FA & security workbench with an encrypted-at-rest TOTP vault, QR import/generation, secure notes, encrypted .aeropad backups, strict WebCrypto validation, self-hosted/offline
翻译准备中
Verify what is exposed, what changed, what acted, and what the evidence actually supports.
翻译准备中
Bounded unauthenticated external exposure scan. Check public files, security headers, certificate evidence, CORS, and optional takeover risk.
翻译准备中
See if your unshield amount links your withdrawal to the deposit address. Free and open source. The check runs in your browser.
翻译准备中
EDEP ist ein offener, prüfbarer Sicherheitsstandard für Windows: ausgehender Verkehr nur für zugelassene Programme, Telemetrie auf das Minimum, jede Blockade protokolliert. Mit kostenlosem Audit-Tool.
翻译准备中
Apna Business Cloud, India me safe. Team backup and vault for Indian companies — Bharat Tijori.
翻译准备中
Agent Sentinel is a local flight recorder and execution boundary for AI coding agents. It blocks dangerous commands, asks you before risky ones, and records everything. One binary, no cloud, no accoun
翻译准备中
Dormathon 2026, Track 1 (Predictive Model): Scam Guardian, a wallet demo that pauses risky transfers when someone may be coached by a scammer. Expo, Android and Web.
翻译准备中
241 domain tools across 35 vendor integrations and CMVP, KEV, EPSS, FedRAMP, SCF, and OSCAL, with Pi, Cursor Agent SDK, and Flue runtime paths.
翻译准备中
Android app that flags nearby Flock ALPRs, Axon body cams, and police by fusing BLE/WiFi + the DeFlock map + Waze police reports. It never connects to, pairs with, or jams anything it detects.
翻译准备中
An independently-enforced Go trust-kernel, egress lockdown, and CI that runs against live infrastructure — the same NanoClaw experience, secured underneath.
翻译准备中
Assess the risk to your organisation's crown jewels in Microsoft 365, Google Workspace or AWS and download a branded PDF report. Runs entirely in your browser.
翻译准备中
Kwetsbaarheden Analyse Tool, openkat.nl.
翻译准备中
Runtime leak detector for modern web apps — finds exposed API keys, validates BaaS misconfigurations (Supabase/Firebase RLS), and catches secrets in JS bundles. Chrome extension + CLI.
翻译准备中
Explore remote monitoring and management tools, forensic artifacts, and detections. Open source intelligence for threat hunters and defenders.
翻译准备中
Generate least-privilege Claude Code permission rules for MCP tools from their live annotations: readOnlyHint tools go to allow, everything else to ask, one mcp__server__tool rule each, never a glob.
翻译准备中
CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers and secret-shaped st
翻译准备中
Pensar is a continuous adversarial testing platform: offensive AI agents attack your live systems, prove real exploits, and re-attack every fix until it holds.
翻译准备中
Claude Code permission rule simulator: load the merged allow, ask and deny settings, show which rule decides any tool call, and find the bypasses: commands that slip past a Bash pattern, paths that es
翻译准备中
Run Claude Code, Codex or pi in a secure Linux VM on your Mac. Your API keys never enter the sandbox, every connection follows your policy, and it pauses in 1 ms and wakes in 0.3 s.
翻译准备中
AgentGuard is an open-source runtime firewall for AI agents. Wire-level enforcement at the protocol boundary — an MCP gateway and an LLM API proxy — with policy-as-code in YAML, human-in-the-loop appr
翻译准备中
Proxed.AI is the simplest way to protect AI API keys in iOS apps. Lock down your API credentials, verify device authenticity with Apple's DeviceCheck, and structure AI outputs—all without a backend. O
翻译准备中
CaMeL-style control/data-flow separation that reduces injection-to-effect risk under stated assumptions. Topology, not a safety certificate.
翻译准备中
A security incident-response console: detections become diagnoses, diagnoses are challenged by evidence, and every response is scored and tiered before anyone acts.
翻译准备中
Every AI employee. One workplace. Connect the bots you already run, set what they may do, and approve anything risky.
翻译准备中
Cartographier les liens entre sociétés, dirigeants, adresses, événements juridiques et sanctions — avec niveau de preuve (confirmé, déclaré, inféré, simulé).
翻译准备中
Open-source security tooling built by VardrSec: API authorization testing, attack surface mapping, and local scan automation.
翻译准备中
Explore an extensive range of use cases supported by Fingerprint, and learn how to successfully implement it for your business with practical guidance and a comprehensive demo.
翻译准备中
Every LLM interaction. Logged. Immutable. Attributed. Human-directed AI assistance with deterministic governance for chat and MCP tool calls. What Is LLM Provost? LLM Provost is a complete enterprise
翻译准备中
Authentication, validation, fraud detection, payments intelligence, and global data, delivered through one unified API.
翻译准备中
JumpServer 是广受欢迎的开源堡垒机与运维安全审计平台，支持主机、数据库、Kubernetes、RemoteApp 等资产统一纳管，覆盖 4A、PAM、数据库审计与合规场景。
Free, open-source, local-first scanner and integrity monitor for OpenClaw skills. npx ironheights scan ./skill
翻译准备中
Blur unregistered faces in your live stream with InnoLive's real-time AI de-identification. Keep registered participants visible and try face privacy protection in your browser.
翻译准备中
Disposable email that actually disappears. Spam-proof, encrypted, real-time. Like a burner phone, but for your inbox.
翻译准备中
Free PDF redaction that really deletes text. Remove names, numbers and hidden metadata from PDFs without uploading them. No account, no watermark.
翻译准备中
Native iOS proxy client (meow-rs) for iOS 18+. Clash-style YAML subscriptions, rule-based routing, DNS over HTTPS, QR-code profile sharing, and a SwiftUI material design in light and dark. Available o
翻译准备中
Five AI agent tool calls, each followed through a real OPA policy compiled to WebAssembly and running in your browser: allowed, held for approval, or blocked.
翻译准备中
Keycloak的Kubernetes运算符。将领域、客户端、用户、角色和身份提供者以代码方式管理。具备GitOps支持、自动密钥同步、漂移检测，兼容Keycloak 20-26+。
AI 翻译
Open-source Rust kernel for AI agents: kernel-enforced permissions, hybrid post-quantum capability tokens, provable actions.
翻译准备中
Black out SSNs, account numbers and personal details in PDFs and screenshots before you send them. Runs entirely in your browser — your file is never uploaded.
翻译准备中
Free WHOIS API, DNS lookup, SSL inspection, subdomain enumeration & email security in one call. 1,000 free requests/mo, no credit card.
翻译准备中
Forward or paste a suspicious email. A team of AI agents dissects it and returns an evidence-cited verdict: SCAM, SUSPICIOUS, or LIKELY SAFE.
翻译准备中
Open source desktop app and Chromium extension for capturing, organizing, and verifying web evidence in OSINT investigations. Local-first, with SHA-256 hashes, a signed manifest, and RFC 3161 timestam
翻译准备中
Point your phone and see the Bluetooth devices around you in AR. Find unknown trackers. Scans are stored on your phone.
翻译准备中
Free scanner for vibe-coded JS, TypeScript and Python apps: leaked keys, broken API routes, swallowed errors, vulnerable packages, PII leaks. Ranked fixes.
翻译准备中
Generate audit-ready PDF and Word documentation for Microsoft Intune policies, settings, assignments, and security baselines with a free read-only tool.
翻译准备中
Reads your existing coding-agent logs and turns them into clear answers about exposure, activity and cost. Local, read-only, no network.
翻译准备中
合规网关，适用于 OpenAI、Anthropic 等。企业自托管，确保敏感数据留在您的网络中，系统提示文本除外。签名收据。
AI 翻译
Herramientas para gestionar la adecuación a la Ley 21.719 de protección de datos
翻译准备中
AI 摘要 · 网站与 README
Queryable encryption for Postgres. Searchable field-level encryption with identity-bound keys, on the database you already use. The infrastructure for privacy-first applications.
翻译准备中
msb-manager runs coding agents in per-project microVMs with deny-by-default egress and credentials that never enter the VM.
翻译准备中
Security-first proxy for Large Language Models with multi-provider support, ring-based plugin pipeline, and real-time SOC dashboard.
翻译准备中
Check a Supabase app's Row Level Security in about a minute. Real attacks on a private copy in your browser, with a fix file when one can be made. Free, no signup.
翻译准备中
Locke is the Sonomos Early Access desktop app for x64 Windows and Linux. It screens AI websites through the Locke Extension and command-line, script and SDK traffic through a local proxy. macOS is com
翻译准备中
A free, open-source VPN client for your subscription. Works with VLESS + Reality, VMess, Trojan, Shadowsocks, Hysteria2, TUIC and WireGuard, and with Remnawave, Marzban and 3x-ui subscriptions. For Wi
翻译准备中
Let Claude Code, Cursor and Codex use your credentials without seeing them. Touch ID per credential, proxy calls, audit log. Open source, local, macOS.
翻译准备中
A safety floor your AI agents can't get under: one policy for every agent, judged by what each call will run, backstopped by the kernel, with a signed record.
翻译准备中
TRACE (Toolkit for Retrieval and Analysis of Cyber Evidence) is free, open-source digital forensics software. Open E01, AFF4 and raw disk images read-only, triage what stands out, recover deleted file
翻译准备中
Compare data privacy, retention, and model training policies across major LLM providers, inference APIs, and AI coding tools.
翻译准备中
Flowlight is open-source application-aware network intelligence for macOS, with deeper visibility into AI agents, tools and MCP servers.
翻译准备中
Lets a person or organization govern their own AI agent through scoped, signed delegation
翻译准备中
AI 摘要 · 审核时修订
An open standard for AI agent identity — signed declarations and attestations that verify offline.
翻译准备中
Free security intelligence API and MCP server. 55 tools: CVE, domain recon, IOC, MITRE ATLAS, D3FEND, code security. No signup required.
翻译准备中
One folder Claude Code, Cursor and Codex all read over MCP. An agent reads only what its person can, every write is a version, and folders share outward.
翻译准备中
Verify and issue EU Digital Identity Wallet credentials with one API call. Open source, runs on your servers, personal data stays with you.
翻译准备中
Free scam shield for Indian elders and families. Paste a message and get a plain verdict: Safe, Be Careful, or Danger. English, Hindi, Hinglish. Runs on your device.
翻译准备中
Baret simulates every Monad transaction before you or your AI agent signs it, checks it against your rules, and explains the verdict in plain words.
翻译准备中
Explore SPDX 3 SBOMs as an interactive graph. Packages, source files, builds, tools, licenses... and every link between them.
翻译准备中
Deterministic rules that enforce what your agents can do in real time, per user and per tool call, with live and after-the-fact analysis. Open source by Hexamind.
翻译准备中
Ten open-source tools to scan, prevent, attack, investigate, gate and contain prompt-injection, MCP supply-chain and agent-to-agent attacks against AI agents.
翻译准备中
Signed, tamper-evident records of what your AI agent decided and what it relied on. Anchored on Solana, checked by anyone in their own browser.
翻译准备中
Secrets management for the agentic era. No more secrets in .env files. Self-hosted, no limits, free forever.
翻译准备中
Keyorra is a free password manager for your Mac: an encrypted vault that never leaves it, and a browser extension that fills logins, cards and one-time codes.
翻译准备中
Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure (CV
翻译准备中
ScanX checks every QR code and barcode for scams before you open it, makes QR codes and gives you a Digital ID card you can share in one tap. Privacy-first: scanning works without an account.
翻译准备中
Stenwatch is a free, open-source tool that narrows every public software flaw to the few that matter to your organisation, with a plain reason for each one.
翻译准备中
Jentic is a sovereign agent operating system. Your people and your agents work side by side, and the knowledge they create compounds into something you own.
翻译准备中
Free Mac app that shows what your AI coding tools installed, checks their settings for problems, and tells you what's safe to clean up. It only looks.
翻译准备中
Code checks 500 certificates exactly, Jev reads the ticket and judges only the few that matter, and a fixed policy decides. Every input, output and cent is shown.
翻译准备中
Mailprogramm, Mailserver, SSH-Client, Remotedesktop, Passwortmanager mit eigenem Server, Editor und Bildschirmspiegeln: Open Source, ohne Telemetrie, mit Nyu der Katze. Ein Hobbyprojekt von Streamer M
翻译准备中
BlindHop mixnet privacy layer for Substrate light clients. Toggle between direct, fast, and full metadata privacy modes. No setup required — runs in your browser.
翻译准备中
SSO, MFA, passkeys, RBAC, and session management — built for developers, trusted by enterprises.
翻译准备中
Subdomain enumeration you can trust. subenum classifies every DNS lookup, grades the run complete, degraded or unreliable, and ships as a single static Go binary.
翻译准备中
One control room over open agent governance, running on your own infrastructure: per-action passkey kill switch, WireGuard remote, post-quantum signatures, and a local-first AI copilot. Apache-2.0, se
翻译准备中
AI governance software covering 30+ frameworks: EU AI Act, ISO 42001, NIST AI RMF, GDPR. Inventory, risk, policy, evidence, LLM evaluation.
翻译准备中
Find what your app accidentally exposed. Free, read-only scan of your live site. No signup.
翻译准备中
Docudis finds names, emails, phone numbers, IBANs and addresses in your documents and replaces them with labels, on your phone, before you send them to an AI.
翻译准备中
MITM proxy for reverse engineering — LLM-ready output, multi-language codegen, sign algorithm inference, request replay, plugin system, native desktop GUI (Wails + Svelte)
翻译准备中
Unofficial MCP server for the Sophos Fusion and Sophos Central APIs. Not a Sophos product and not supported by Sophos. 310 tools across 22 API namespaces, as a Claude Desktop extension or via npx.
翻译准备中
Rapid7 Bulk Export MCP - AI-powered analysis for Rapid7 Command Platform data using MCP (Model Context Protocol) & AgentSkills.
翻译准备中
Large Language Model (LLM) information redactor that prevents private information from being sent to LLMs from agentic tools by substituting placeholders for private information on outgoing requests a
翻译准备中
Sequent is the world’s first online voting platform to ensure the highest level of confidence in elections for voters, election managers, and auditors
翻译准备中
Vanity address mint for EVM and TRON. You make half the key on your own computer, we mint the other half on GPUs, and only you can put the full private key together.
翻译准备中
One sealed envelope per person: a letter and the passwords they need, encrypted on your phone, opened only after months of silence. Open source, not audited.
翻译准备中
AI IDE security hook: blocks directories, scans secrets, and protects AI interactions
翻译准备中
Open-source crates for the Enclavia enclave runtime: in-enclave services, shared protocol types, client SDK, CLI. Dual-licensed Apache-2.0/MIT.
翻译准备中
Klickbarer Prototyp: Pendelströme Konstanz–Kreuzlingen gemeinsam berechnen, ohne Rohdaten herzugeben (MPC, PSI, Differential Privacy) – mit Testdaten.
翻译准备中
You can't govern what you can't see. Role mining and analytics that make sense of your authorization data — open source, self-hosted, your identity data never leaves your environment.
翻译准备中
Verify two deployed randomness beacons from their real outputs: NIST Beacon 2.0 pulses (SHA-512 hash chain, skiplist, precommitment, RSA signature) and drand League of Entropy rounds (threshold BLS si
翻译准备中
Check a sender address or a full email for phishing signals, with each finding explained. PhishGuard’s scores are heuristic evidence, not a guarantee of safety.
翻译准备中
Truly redact PDFs in your own browser. Text is removed from the file, not covered with a black box, and your document is never uploaded.
翻译准备中
Security checks agents can call: MCP manifest preflight, source-pattern scanning and injection screening, with signed redacted receipts.
翻译准备中
Browse, search, and explore all Microsoft Intune Settings Catalog definitions — fast, and without needing Intune access.
翻译准备中
Establish trust on every request. Welcome real users and AI agents, stop abusive bots — GDPR-compliant, risk-based verification that minimises friction.
翻译准备中
13 specialized AI agents, 30+ MCP integrations, 7,200+ detection rules. Apache 2.0. Local-first.
翻译准备中
Live demo of the Risk, Fraud & Regulatory Intelligence Copilot. Runs in your browser with fake sample data; no Snowflake, no AI call.
翻译准备中
Локальный AI-ассистент для аудита безопасности кода на Python, JavaScript/TypeScript и Go: находит уязвимости, классифицирует по CWE и OWASP Top 10 и предлагает проверенные исправления.
翻译准备中
shard-core 将 ChaCha20-Poly1305 与 Shamir 密钥分割、弹性恢复、显式秘密输出、Fordefi 短语工作流以及经过验证的离线构建路径相结合。
AI 翻译
From generation to distribution. Generate, manage, and share SBOMs and compliance documents. Integrate with GitHub, GitLab, and more. CRA & NTIA compliant.
翻译准备中
Sealed evidence, reconstructed attack chains and the exact log line behind every finding, for Claude Code, Codex, Cursor, Gemini, Copilot and more. Open source.
翻译准备中
v7.0: 4 lenses × 4 mindsets + consensus scoring. 90% precision, free. Plus interactive security assessment (39 verticals, 845 checks).
翻译准备中
为 iPhone 而设计的私密卡片收藏空间。整理银行卡与全球账户，本机加密保存，随时欣赏你的收藏。QuanCard 全卡卡，现已开放 TestFlight 公开测试。
翻译准备中
Sessions to the machines you already run, without an agent on them. Recorded, approved, audited.
翻译准备中
Open-source ใช้ฟรี ทำงานบนเครื่องผู้เล่นเอง แสดงร่องรอยเป็นหลักฐาน ไม่ตัดสินแทนคน
翻译准备中
Flash an ESP32-C5 board from the browser with the firmware that makes it a Kismet capture source for Wi-Fi, Zigbee/Thread and Bluetooth LE advertising.
翻译准备中
Self-hosted security operations platform. Threat monitoring, analysis, and automated response with full control over your data.
翻译准备中
A Wazuh alert fires at 3am and your IR playbook is a Markdown doc nobody executes, so steps get skipped and the ticket is a guess. Hotwash makes the same p
翻译准备中
Live camera view, event review, montage, timeline, push notifications and a local AI agent for ZoneMinder. Free and open source.
翻译准备中
Memory, coordination, verification, and governance across a whole portfolio. We run our own company on it, and we publish the receipts.
翻译准备中
The maintained, embeddable security layer for LLM and agent apps, with compliance-grade evidence.
翻译准备中
PG1 Threat Intelligence: threat-intelligence tools for AI agents over MCP, A2A and REST, with free wallet, domain and hostname checks and a STIX 2.1 indicator feed paid per call with x402 on Base.
翻译准备中
ReARM is a release governance platform: see what's in every release, whether it's cleared to ship functionally and security-wise, and the evidence proving both.
翻译准备中
Security monitoring middleware for IChatClient — prompt injection, hallucination, and operational anomaly detection with an embedded dashboard.
翻译准备中
Meow - A Clash/mihomo Android client with Flutter UI, powered by meow-rs and lwip-based tun2socks
翻译准备中
LongHorn ACS for Counter-Strike 1.6. Download information, exact release hashes, data access, and honest security status.
翻译准备中
Deterministic, graph-native threat modeling. Model your real stack, map exposures to MITRE ATT&CK, and produce citable evidence for DORA and NIS2.
翻译准备中
做出来了，现在该展示了。
在项目文件夹中执行一条命令即可。只要由AI辅助制作，就不必具备AI功能。
/nomorevibe查看收录流程