Search

Read-only checker for Kubernetes AI-agent workloads: flags missing gVisor/Kata runtime class, token automount, root or privileged containers, host namespaces, missing limits and missing metadata/RFC1918 egress NetworkPolicy.

Aegis governance integration for LangChain — add policy enforcement, risk assessment, and audit logging to any LangChain tool.

Open-source defensive harness and learning lab for reproducing and measuring agentic AI failure modes with portable traces, attack graphs, scorecards, and data-boundary tests.

AI Harness + Rust + Security Tools = Scorchkit

AI Application Security Autopilot — Exploit simulation, attack surface mapping & pipeline protection for LLM apps and AI agents

Autonomous security scanner for AI agents — detects prompt injection, tool abuse, data exfiltration, and OWASP ASI Top 10 vulnerabilities.

AI Agent Immune System - Security scanner, PII sanitizer, intent-action mismatch detector. 285+ patterns, OWASP Agentic AI Top 10. 100% local.

Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection resistance, and audit live MCP servers for tool poisoning.

MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers in Claude Code, Cursor and VS Code (Copilot) configs. Local-first CLI, no telemetry.

Fleet AI Security Posture Management (AI-SPM): client agents on each developer machine score their AI coding agents' guard surfaces (Claude Code, Cursor, Codex, Gemini CLI — permissions, hooks, sandboxes, mcp.json) and ship hash-anchored events to a central server + your SIEM. Fleet-wide posture; measures, doesn't block. Rust.

Secure, local-first AI development platform with supply-chain security gate. Run coding agents offline (Claude, ChatGPT, Gemini). Desktop IDE, CLI/TUI, MCP plugin, VS Code extension. Nemesis security scanning blocks dangerous code before execution.

Security scanner for AI agent skills, prompt injection, malicious installers, and supply-chain risks

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

AI supply-chain BOM: every agent, MCP server and AI package, and what each one can reach. Open-source scanner and self-hosted control plane for code, containers, cloud and AI. Self-host free; local scans need no account.

Security-first orchestration for Claude Code and OpenCode-based AI workflows.

AI agent security plugin for OpenClaw: prompt injection detection, PII sanitization, and monitoring dashboard

SecureVector SDK for LangGraph — brings the local threat monitor's three controls (tool-call permissions, secret/data-leak detection, threat detection) to every LangGraph tool call, with tamper-evident audit logging.

n8n node for LandingAI agentic document parsing

Scan TypeScript AI agent code for unguarded tool calls — pip wrapper for diplomat-agent-ts

Runtime security and policy enforcement for AI agents and LLM tool calls, with a provider-neutral authorization and evidence layer.