Sandbox
24 repos for security-testing · Any agent · SecurityClear

Security testing toolkit for AI Agent: curated SecLists wordlists, injection payloads, and expert agents for authorized pentesting, CTFs, and bug bounties

380
stijnswapped/
Myrqen

Security testing that runs inside the coding agent you already use. Source-available, not open source.

158
iammm0/
secbot

Authorized security testing workspace. v2 TypeScript terminal product on release; v1 Python on pypi-release; Go branch is demo only.

73
zebbern/
zebbern-kali-mcp

MCP server for Kali Linux penetration testing - 121 tools for AI-assisted security testing - Giving Agents access to full pentesting tools

47

A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com

97

MCPify is an AI enablement compiler that transforms existing applications into AI-native, agent-operable systems.

96

A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.

95
the-void-ia/
void-box
the-void-ia/void-boxFrameworks & SDKs

Composable agent runtime with enforced isolation boundaries

88

Containment for AI agents - user isolation, sandboxed execution, network controls, backup/rollback. TLA+ verified.

173
uber/
ADR

ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.

1.5k

A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.

1.5k
AIPentest/
CyberStrikeAI

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

6.5k
NVIDIA/
NeMo-Relay
NVIDIA/NeMo-RelayFrameworks & SDKs

Multi-language agent runtime and library for execution scope management, lifecycle events, and middleware on tool and LLM calls.

169

Tamper-evident integrity monitor for the MCP config & server files your local AI agents load.

46
lasso-security/
mcp-gateway

A plugin-based gateway that orchestrates other MCPs and allows developers to build upon it enterprise-grade agents.

385
M507/
AI-SOC-Agent

Blackhat 2025 presentation and codebase: AI SOC agent & MCP server for automated security investigation, alert triage, and incident response. Integrates with ELK, IRIS, and other platforms.

48
vje013/
darwin-agentic-cloud

Verifiable and free cloud compute for AI agents. webMCP + MCP native. Check out our sandboxed Beta + research in the README

36
hookdeck/
webhook-skills

Webhook integration skills for AI coding agents (Claude Code, Cursor, Copilot). Step-by-step guidance for setting up webhook receivers, signature verification, and event handling for Stripe, Shopify, GitHub, and more. Built on the Agent Skills specification.

84

Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.

231