Search

Local-first AI agent security scanner and MCP traffic monitor. Finds prompt injection, over-privileged tools, and secrets in agent code, manifests, and prompts; records MCP tool calls with secrets masked. CLI, pre-commit, GitHub Action, SARIF, OWASP Agentic Top 10.

Security layer for AI agents: real-time interception of pip/npm/cargo/gem/go installs via Hermes & OpenClaw plugins, Claude Code/Codex hooks, MCP, shell guard, PATH shim, execve, and index proxy. Checks CVEs (OSV/NVD/GitHub), typosquats, malware, licenses, provenance, trust, lockfile hashes. Offline mirror, hash-chained audit, SBOM/SARIF.

AI agents for pentesting, code audit, fuzzing, vulnerability discovery, and reverse engineering: harnesses, sandboxes, security MCP servers, benchmarks, and evals.

Secure prompt engineering for AI agents and engineering teams

AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 69 tools, MITM proxy, stealth browser, autonomous AI agent. Built on Tauri + Rust + React.

Zero-config agentegrity adapter for the OpenAI Agents JS SDK (@openai/agents). Mirrors the Python agentegrity.openai_agents module.

Framework adapters for AriKernel — protect agents built with LangChain, CrewAI, OpenAI, and more

ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军

Open-source config scanner for AI coding agents: scores the permissions, hooks, sandbox and MCP settings of Claude Code, Codex, Cursor and Gemini CLI. Runs locally and measures by default, with an optional fleet server and SIEM feed. Rust.

Multi-tier firewall for AI agents — blocks prompt injections, jailbreaks, and scope violations; fast local tiers screen every request, only uncertain cases reach an LLM judge

Zero-config agentegrity adapter for the Vercel AI SDK (ai). TypeScript-native addition with no Python equivalent.

Zero-config agentegrity adapter for LangChain JS and LangGraph JS. Mirrors the Python agentegrity.langchain module.

Name reservation. Adversarial testing for LLM features and agents — not released yet.

Test whether human approval controls for AI agents actually work.

IntentFrame security plugin for Hermes Agent (Nous Research) — an external policy checkpoint that gates terminal, code, file, and cron tool calls before they run on your machine.

Deprecated — renamed to 'prismor'. Installs prismor for you. Run: pip install prismor

Touch ID confirmation for AI coding agents on macOS. Pair with sandboxes for defense-in-depth against prompt injection.

Turn the bots hunting your site for secrets (.env, .git, SSH keys) into its safest answers. A standard and zero-dependency audit: a clean 4xx, nothing shaped like a credential, no traps, and, if you want, a harmless joke with a note for the AI agents that

Read-only crypto wallet offboarding and access-revocation verifier for Safe smart accounts, AI agents, and token approvals

Skills Manager: scan, install, update, and analyze AI agent skills safely across Claude, Cursor, Codex, and OpenCode.