Open-source AI security scanner for Codex, Claude Code, and ACP-compatible coding agents—kept current with OpenAI Codex Security.

Collection of agent skills to find vulnerabilities inside your web/mobile apps.

Build Secure and Compliant AI agents and MCP Servers. YC W23

A security scanner for your LLM agentic workflows

ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.

AI-powered bug bounty hunting toolkit that works with or without subscription.

OWASP Foundation web repository

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

Open-source adversary emulation for AI agents and MCP servers.

Deterministic safety solutions for probabilistic AI agents

Tamper-evident integrity monitor for the MCP config & server files your local AI agents load.

ToolHive is an application that allows you to install, manage and run MCP servers and connect them to AI agents

A practical, community-driven checklist for pentesting MCP servers. Covers traffic analysis, tool-call behavior, namespace abuse, auth flows, and remote server risks. Maintained by Appsecco and licensed for remixing.

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.

Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.

250+ real-world TypeScript AI projects: workflows, agents, and multi-agent systems with production-ready architecture, not chatbot demos.

🤖 Curated AI OSINT resources — Google dorks, Shodan queries, GitHub dorks, and techniques to discover exposed LLM endpoints, leaked AI API keys, misconfigured vector databases, and unprotected AI agents

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.

SAIL V2 (Secure AI Lifecycle) as an agent skill — the full 91-risk catalog for AI/agent gap assessments, security roadmaps, and compliance checklists. Installs on Claude Code, Codex, ChatGPT, Antigravity, and any SKILL.md-compatible agent.

A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

The most comprehensive Claude Code guide: agentic workflows, hooks, skills, MCP servers, quizzes, and production-ready templates. 430K+ lines.

Governance gateway for AI agents — bounded, auditable, session-aware control with MCP proxy, shell proxy & HTTP API. Works with Cursor, Claude Code, Codex, and any MCP-compatible agent.

Prior direction, kept rather than deleted. Signed, offline-verifiable receipts for AI agent actions, and a reference implementation of the OWASP Agentic Skills Top 10 AST09 receipt pattern. Nobulex is now the independent reliability registry for agent tools: github.com/arian-gogani/nobulex-registry