An open standard for AI agent identity — signed declarations and attestations that verify offline.
翻译准备中
安全项目
正在加载…
安全项目
在代码仓库中发现AI编程工具痕迹的公开项目，按最近收录排序。
安全 · 1,303个项目清除筛选
Free security intelligence API and MCP server. 55 tools: CVE, domain recon, IOC, MITRE ATLAS, D3FEND, code security. No signup required.
翻译准备中
One folder Claude Code, Cursor and Codex all read over MCP. An agent reads only what its person can, every write is a version, and folders share outward.
翻译准备中
Free scam shield for Indian elders and families. Paste a message and get a plain verdict: Safe, Be Careful, or Danger. English, Hindi, Hinglish. Runs on your device.
翻译准备中
Baret simulates every Monad transaction before you or your AI agent signs it, checks it against your rules, and explains the verdict in plain words.
翻译准备中
Explore SPDX 3 SBOMs as an interactive graph. Packages, source files, builds, tools, licenses... and every link between them.
翻译准备中
Deterministic rules that enforce what your agents can do in real time, per user and per tool call, with live and after-the-fact analysis. Open source by Hexamind.
翻译准备中
Ten open-source tools to scan, prevent, attack, investigate, gate and contain prompt-injection, MCP supply-chain and agent-to-agent attacks against AI agents.
翻译准备中
Signed, tamper-evident records of what your AI agent decided and what it relied on. Anchored on Solana, checked by anyone in their own browser.
翻译准备中
Secrets management for the agentic era. No more secrets in .env files. Self-hosted, no limits, free forever.
翻译准备中
Keyorra is a free password manager for your Mac: an encrypted vault that never leaves it, and a browser extension that fills logins, cards and one-time codes.
翻译准备中
Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure (CV
翻译准备中
ScanX checks every QR code and barcode for scams before you open it, makes QR codes and gives you a Digital ID card you can share in one tap. Privacy-first: scanning works without an account.
翻译准备中
Stenwatch is a free, open-source tool that narrows every public software flaw to the few that matter to your organisation, with a plain reason for each one.
翻译准备中
Jentic is a sovereign agent operating system. Your people and your agents work side by side, and the knowledge they create compounds into something you own.
翻译准备中
Free Mac app that shows what your AI coding tools installed, checks their settings for problems, and tells you what's safe to clean up. It only looks.
翻译准备中
Code checks 500 certificates exactly, Jev reads the ticket and judges only the few that matter, and a fixed policy decides. Every input, output and cent is shown.
翻译准备中
Mailprogramm, Mailserver, SSH-Client, Remotedesktop, Passwortmanager mit eigenem Server, Editor und Bildschirmspiegeln: Open Source, ohne Telemetrie, mit Nyu der Katze. Ein Hobbyprojekt von Streamer M
翻译准备中
BlindHop mixnet privacy layer for Substrate light clients. Toggle between direct, fast, and full metadata privacy modes. No setup required — runs in your browser.
翻译准备中
SSO, MFA, passkeys, RBAC, and session management — built for developers, trusted by enterprises.
翻译准备中
Subdomain enumeration you can trust. subenum classifies every DNS lookup, grades the run complete, degraded or unreliable, and ships as a single static Go binary.
翻译准备中
One control room over open agent governance, running on your own infrastructure: per-action passkey kill switch, WireGuard remote, post-quantum signatures, and a local-first AI copilot. Apache-2.0, se
翻译准备中
AI governance software covering 30+ frameworks: EU AI Act, ISO 42001, NIST AI RMF, GDPR. Inventory, risk, policy, evidence, LLM evaluation.
翻译准备中
Find what your app accidentally exposed. Free, read-only scan of your live site. No signup.
翻译准备中
Docudis finds names, emails, phone numbers, IBANs and addresses in your documents and replaces them with labels, on your phone, before you send them to an AI.
翻译准备中
MITM proxy for reverse engineering — LLM-ready output, multi-language codegen, sign algorithm inference, request replay, plugin system, native desktop GUI (Wails + Svelte)
翻译准备中
Unofficial MCP server for the Sophos Fusion and Sophos Central APIs. Not a Sophos product and not supported by Sophos. 310 tools across 22 API namespaces, as a Claude Desktop extension or via npx.
翻译准备中
Rapid7 Bulk Export MCP - AI-powered analysis for Rapid7 Command Platform data using MCP (Model Context Protocol) & AgentSkills.
翻译准备中
Large Language Model (LLM) information redactor that prevents private information from being sent to LLMs from agentic tools by substituting placeholders for private information on outgoing requests a
翻译准备中
Sequent is the world’s first online voting platform to ensure the highest level of confidence in elections for voters, election managers, and auditors
翻译准备中
Vanity address mint for EVM and TRON. You make half the key on your own computer, we mint the other half on GPUs, and only you can put the full private key together.
翻译准备中
One sealed envelope per person: a letter and the passwords they need, encrypted on your phone, opened only after months of silence. Open source, not audited.
翻译准备中
AI IDE security hook: blocks directories, scans secrets, and protects AI interactions
翻译准备中
Open-source crates for the Enclavia enclave runtime: in-enclave services, shared protocol types, client SDK, CLI. Dual-licensed Apache-2.0/MIT.
翻译准备中
Klickbarer Prototyp: Pendelströme Konstanz–Kreuzlingen gemeinsam berechnen, ohne Rohdaten herzugeben (MPC, PSI, Differential Privacy) – mit Testdaten.
翻译准备中
You can't govern what you can't see. Role mining and analytics that make sense of your authorization data — open source, self-hosted, your identity data never leaves your environment.
翻译准备中
Verify two deployed randomness beacons from their real outputs: NIST Beacon 2.0 pulses (SHA-512 hash chain, skiplist, precommitment, RSA signature) and drand League of Entropy rounds (threshold BLS si
翻译准备中
Security checks agents can call: MCP manifest preflight, source-pattern scanning and injection screening, with signed redacted receipts.
翻译准备中
Browse, search, and explore all Microsoft Intune Settings Catalog definitions — fast, and without needing Intune access.
翻译准备中
Establish trust on every request. Welcome real users and AI agents, stop abusive bots — GDPR-compliant, risk-based verification that minimises friction.
翻译准备中
13 specialized AI agents, 30+ MCP integrations, 7,200+ detection rules. Apache 2.0. Local-first.
翻译准备中
Live demo of the Risk, Fraud & Regulatory Intelligence Copilot. Runs in your browser with fake sample data; no Snowflake, no AI call.
翻译准备中
Локальный AI-ассистент для аудита безопасности кода на Python, JavaScript/TypeScript и Go: находит уязвимости, классифицирует по CWE и OWASP Top 10 и предлагает проверенные исправления.
翻译准备中
shard-core 将 ChaCha20-Poly1305 与 Shamir 密钥分割、弹性恢复、显式秘密输出、Fordefi 短语工作流以及经过验证的离线构建路径相结合。
AI 翻译
From generation to distribution. Generate, manage, and share SBOMs and compliance documents. Integrate with GitHub, GitLab, and more. CRA & NTIA compliant.
翻译准备中
Sealed evidence, reconstructed attack chains and the exact log line behind every finding, for Claude Code, Codex, Cursor, Gemini, Copilot and more. Open source.
翻译准备中
v7.0: 4 lenses × 4 mindsets + consensus scoring. 90% precision, free. Plus interactive security assessment (39 verticals, 845 checks).
翻译准备中
为 iPhone 而设计的私密卡片收藏空间。整理银行卡与全球账户，本机加密保存，随时欣赏你的收藏。QuanCard 全卡卡，现已开放 TestFlight 公开测试。
翻译准备中
Sessions to the machines you already run, without an agent on them. Recorded, approved, audited.
翻译准备中
Open-source ใช้ฟรี ทำงานบนเครื่องผู้เล่นเอง แสดงร่องรอยเป็นหลักฐาน ไม่ตัดสินแทนคน
翻译准备中
Flash an ESP32-C5 board from the browser with the firmware that makes it a Kismet capture source for Wi-Fi, Zigbee/Thread and Bluetooth LE advertising.
翻译准备中
A Wazuh alert fires at 3am and your IR playbook is a Markdown doc nobody executes, so steps get skipped and the ticket is a guess. Hotwash makes the same p
翻译准备中
Live camera view, event review, montage, timeline, push notifications and a local AI agent for ZoneMinder. Free and open source.
翻译准备中
Memory, coordination, verification, and governance across a whole portfolio. We run our own company on it, and we publish the receipts.
翻译准备中
The maintained, embeddable security layer for LLM and agent apps, with compliance-grade evidence.
翻译准备中
PG1 Threat Intelligence: threat-intelligence tools for AI agents over MCP, A2A and REST, with free wallet, domain and hostname checks and a STIX 2.1 indicator feed paid per call with x402 on Base.
翻译准备中
ReARM is a release governance platform: see what's in every release, whether it's cleared to ship functionally and security-wise, and the evidence proving both.
翻译准备中
Security monitoring middleware for IChatClient — prompt injection, hallucination, and operational anomaly detection with an embedded dashboard.
翻译准备中
LongHorn ACS for Counter-Strike 1.6. Download information, exact release hashes, data access, and honest security status.
翻译准备中
Deterministic, graph-native threat modeling. Model your real stack, map exposures to MITRE ATT&CK, and produce citable evidence for DORA and NIS2.
翻译准备中
Sanitised public demo of a read-only Microsoft 365 security operations console (FastAPI + Graph, 21 collectors). All data is synthetic and machine-verified.
翻译准备中
Map Gen AI and Agentic security risks to industry frameworks. Score coverage across EU AI Act, FedRAMP, DORA, NIST, ISO, and 20 more. Submit any standard for automated mapping. Free, open-source, from
翻译准备中
La compartimentation de Qubes, pour tout le monde. Des Espaces isolés, une couleur par Espace, aucune expertise requise.
翻译准备中
Explainers on DNS-01 validation, wildcard certificates, CNAME delegation, deploy hooks and automated renewal, plus a documentation assistant that runs a local LLM over CertMate's docs. No credentials,
翻译准备中
Scan Claude Code, Codex, Cursor and Gemini CLI logs for leaked API keys. Scrub them. Block the next one.
翻译准备中
Check if a photo or video is real by verifying its camera signature and integrity directly in your browser without uploading files
翻译准备中
AI 摘要 · 网站与 README
Paste your Wazuh custom rules and decoders and see, in your browser, what wazuh-analysisd 4.14.7 will warn about at load: rules ignored because a parent is missing or loads later, duplicate IDs, stati
翻译准备中
Deterministic allow, deny or hold for every agent action over POST /v1/decide. Holds resolve through signed, cost-bound approval tokens; no LLM in the decision path. Validated live: 176 decisions, a 3
翻译准备中
Three free checks: a suspicious message or prompt (read in your browser, never sent), a crypto token or wallet address across EVM, Solana, Sui and TRON, and an npm package before you install it. No ac
翻译准备中
Démonstration de détection de fraude en assurance IARD, sur données fictives : règles de scoring, analyse réseau, lecture de rapport de police et dossier de recours. Refonte en cours.
翻译准备中
A privacy-preserving JSON-RPC proxy for Ethereum nodes with ZK-proof authentication and hierarchical RBAC.
翻译准备中
Privaro keeps your private photos and videos encrypted on your iPhone, behind Face ID and a passcode of its own. No account, nothing uploaded.
翻译准备中
Healthcare-ops AI assistant where the harness, not the model, controls access, tools and actions. Role-scoped RAG, confirm-before-execute, audit traces, red-team and model-cost labs. Live demo.
翻译准备中
Static-first, explainable PE triage with auto-synthesized YARA rules (never executes samples)
翻译准备中
Universal catalog of offline-first defensive cybersecurity plugins, 18 specialist AI agent profiles, and deterministic verification tools for GitHub Copilot, Claude Code, and Codex.
翻译准备中
AI-native correlation engine for enterprise SOC teams. Global feed coverage, MITRE ATT&CK mapping, STIX 2.1 export, API-first integration.
翻译准备中
Identify unknown callers and find the information connected to any phone number, using publicly available data from trusted sources.
翻译准备中
Built for safety-critical systems, our Trust Lifecycle Management platform delivers unified cybersecurity for IoT and embedded systems in one framework.
翻译准备中
Open mini-CNAPP: code-to-runtime lifecycle graph, Zero-Trust policy (Python + Rego), trace-to-commit
翻译准备中
Before an AI agent pays for an API, vet402 buys it with its own money and shows what came back. Grades come only from vet402's own purchases.
翻译准备中
Vérifiez les avis de concours, faux virements Mobile Money et faux visas avant d'envoyer votre argent.
翻译准备中
当客户的安全审查阻碍交易进度时，AI 安全工程师能发现攻击者实际可以触及的范围并编写修复代码；AI 渗透测试员则通过入侵来验证结果。您负责审批每一项
AI 翻译
Automatic protection against ransomware, human error and hardware failure. Your bucket, your keys. US$5 per server per month.
翻译准备中
Read-only attack-path reasoning and remediation prioritisation over scanner, identity and exploit-intel data
翻译准备中
A local-first security gateway for Claude Code and OpenAI-compatible coding agents. One Rust binary on 127.0.0.1: private keys and seed phrases redacted outbound, dangerous tool calls blocked inbound.
翻译准备中
Guardbee scans your websites with AI, reports risk in business language, and BeeAI delivers on-the-spot fixes. 14-day free trial. Plans from $30/month.
翻译准备中
x402 风险检查提供商：签署的预付款裁定——OFAC、网络钓鱼信息、交易模拟、drainer-kit 代码，以及我们自己的 EIP-7702 套件监控（毒化者、清扫者）。每次检查 $0.001，使用预付
AI 翻译
The menu-bar radar for runaway, leaking and forgotten processes on your Mac. Free, open source, offline.
翻译准备中
Your own model checks a draft report against the code it cites and returns one verdict: submit, rewrite then submit, prove first, hold as a duplicate, or drop.
翻译准备中
A local-first workbench for OpenAI Codex Security: run, inspect, compare and govern AI-assisted security scans without losing the evidence, cost and
翻译准备中
Download the DuckDuckGo browser to search and browse more privately. Available for Windows, Mac, iOS, and Android.
翻译准备中
MSP Atlas: self-hosted IT documentation and an encrypted password vault for managed service providers, with per-client access and a read-only client portal.
翻译准备中
使用 pac4j 保护 Java 应用：在 Spring Boot 等框架中实现 OpenID Connect、SAML、CAS、OAuth 和 JWT 的身份验证与授权。
AI 翻译
KiberOgoh UZ — mahalla darajasidagi milliy kiber qalqon platformasi. Fuqarolarni onlayn firibgarlik va kiber tahdidlardan himoya qiladi.
翻译准备中
Xencodes is a virtual SMS verification platform. Search for the service you need, choose a country, and get a virtual number that receives your SMS verification code in seconds. Pay as you go in NGN,
翻译准备中
Give your AI a passport: a name any wallet can read and a track record anyone can check. Your AI's first one is free.
翻译准备中
Hawkeye Sterling — AML/CFT entity risk assessment for dealers in precious metals and stones: structured 0–30 risk scoring, CDD/SDD/EDD verdicts, on-device register and hash-chained audit log. All data
翻译准备中
Document-based age verification for online platforms with white-label flows, privacy-first by design, fair billing, and seamless integration via API or packages.
翻译准备中
Council of AI is an independent AI-measurement body. Explore the current GSPC measurements, read the change record, verify signed evidence, use the feeds.
翻译准备中
Agente de seguridad digital por WhatsApp. Links, CBU/CVU, teléfonos, correos y archivos analizados en minutos.
翻译准备中
Check scam messages, fake job offers, links, phone numbers and UPI QR codes for free. Made in India.
翻译准备中
Check emails and URLs instantly. Detect phishing, fake addresses, and malware domains — free, no signup.
翻译准备中
Encryption hides what a message says. SentinelSpread also hides that it was sent: AES-256-GCM, a real GNU Radio spread-spectrum link, and steganography in ordinary images and audio. 20 working tools.
翻译准备中
Paste AI-generated text, see the invisible characters hidden in it, and copy a clean version. Runs entirely in your browser.
翻译准备中
在调用 AI 代理之前检查其端点：只读、无需 API 密钥的信任检查，返回机器可读的 trustDecision，基于观察到的可靠性证据。
AI 翻译
免费检测你的网络出口：注册 Muse 前先看会不会进等候名单；Muse、Claude、ChatGPT、Gemini 各自看到的 IP 在哪、能不能用；住宅还是机房、DNS / WebRTC 有没有泄露、Claude Code 终端走哪个出口。每条问题都写明怎么改，无需登录。
翻译准备中
Open-source agentic DFIR. Agents divide the case on a shared board, write their own tools, and leave a hash-chained record you can put in front of a court. Free under the AGPL.
翻译准备中
OSS SIEM + XDR Powered by Threat intelligence and real time correlation. Built for 24x7 Security Operations with Automated Threat Detection and Response
翻译准备中
Every MCP tool call journaled with secrets redacted, risky ones held until you approve. Self-hosted, Apache-2.0.
翻译准备中
您的拉取请求通过了审查，但发布的压缩包却未经过审查。Drydock 对准确的 npm、PyPI 或 VS Code 制品进行比对，并将供应链发现锁定在变更的代码行上。
AI 翻译
Verify Execution Receipts from Axeum Technologies using a receipt ID or public key
翻译准备中
AI 摘要 · 网站与 README
tweetfeed.live MCP server (CF Worker) - 14 IOC threat-intel tools, 7 resources, 3 prompts, no auth, CC0 data. Endpoint: https://mcp.tweetfeed.live
翻译准备中
Live IOC feeds for Threat Intelligence - URLs, domains, IPs, hashes. Real-time Twitter feeds, updated every 15 min.
翻译准备中
Runs any program inside namespaces with no network interfaces, no routes, no DNS, plus capability dropping and a seccomp filter blocking network syscalls. Two Go modules, no runtime services.
翻译准备中
Deterministic crypto inventory for Python wheels, with FIPS compatibility as one lens over it. It gathers evidence; it does not decide FIPS compliance.
翻译准备中
Runs several independent, narrowly focused passes over every source file instead of one general “find bugs” prompt, then merges the results. Every file gets a recorded status and every failed pass is
翻译准备中
ArgusAI is an AI-powered event detection system for home security. Analyze video feeds from UniFi Protect, RTSP, and USB cameras with multi-provider AI.
翻译准备中
做出来了，现在该展示了。
在项目文件夹中执行一条命令即可。只要由AI辅助制作，就不必具备AI功能。
/nomorevibe查看收录流程