Search

Arcjet runtime security SDK for Fastify — bot protection, rate limiting, prompt injection detection, PII blocking, and WAF

Nation-state grade, defense-in-depth security testing framework. Tests web apps, extensions, desktop, mobile, cloud, AI/LLM, hardware, and supply chain from a single CLI.

Unofficial Node.js SDK for Prompt Security Protection Service

Predictive dependency security engine. Trust scores, zombie detection, blast radius analysis for your supply chain.

Security auditor for AI agent skills — catches hidden-Unicode prompt injection, reviewer-subversion, data exfiltration & post-install drift that markdown-only vetters miss.

Security-focused prompt library and Claude Code skill for automated IaC security reviews. Covers Terraform, Kubernetes, Docker, Ansible, CloudFormation, and CI/CD pipelines. Compliance mapping to CIS, NIST 800-53, PCI-DSS, SOC2, HIPAA, and GDPR.

ESLint plugin for browser security — detects DOM XSS, postMessage abuse, tokens in localStorage, insecure cookies, clickjacking, mixed content, and CSP gaps.

ESLint plugin for Supabase security — catches the service_role key reaching client code, RPC called with a computed function name, auth results whose error is discarded, and storage buckets created public.

Secure-by-default software builder skill for Claude Code

SaaS security scanner CLI: finds tenant isolation gaps, IDOR/BOLA, missing Supabase RLS, leaked secrets, SQL injection, CORS and webhook flaws. Traces routes, server actions and request data in JS/TS, checks dependencies for known CVEs (OSV.dev). Maps evi

Persistence layer for Aegisora AI governance platform.

Check, harden, and retest web projects with an AI coding agent and reproducible evidence.

Protect your Next.js application with secure headers

Easy-to-use, customizable, high-quality secure code review skills for AI agents.

Catches the exact security mistakes that have actually breached real AI-built apps, before you deploy.

Pre-merge and pre-install trust checks for AI-agent skills and MCP configurations. Scan capabilities, detect risky changes, and block unapproved agent behavior in CI.

AI Security Research Radar — AI for security and security for AI

Zero-config security scanner for React Native & Expo apps. Find vulnerabilities with 68 security rules covering Android, iOS, and React Native specific issues.

Deterministic fact producers for security auditing: which deleted code came from a security fix, and which changed symbols no test ever executed.

Arcjet Guards SDK — AI guardrails for rate limiting, prompt injection detection, and sensitive info detection