Open Source Ai Security Privacy Tools

strix ★ 73K

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

shannon ★ 51K

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabi

iFixAi ★ 43K

Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is sup

SkillSpector ★ 24K

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in

codex-security ★ 11K

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-se

garak ★ 9.8K

the LLM vulnerability scanner

AI-Infra-Guard ★ 7.3K

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

AiSOC ★ 6.3K

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-host

giskard-oss ★ 5.9K

🐢 Open-Source Evaluation & Testing library for LLM Agents

Agentic-Bug-Hunter ★ 5.5K

AI-powered bug bounty hunting toolkit that works with or without subscription.

nono ★ 4.8K

secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.

lean-ctx ★ 3.9K

LeanCTX is the Context Gateway for AI Systems. Select task-relevant context, apply supported controls, connect local knowledge and inspect recorded evidence. Op

CyberStrike ★ 3.3K

Open-source AI-powered offensive security harness for automated penetration testing.

open-kritt ★ 2.4K

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

pentest-ai-agents ★ 2.4K

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, r

toolhive ★ 2.3K

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

beelzebub ★ 2.2K

A secure low code deception runtime framework, leveraging AI for System Virtualization.

ADR ★ 2.1K

ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.

agentic_security ★ 2.0K

Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪

bla ★ 1.9K

🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineerin

pentest-ai ★ 1.8K

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

FuzzyAI ★ 1.6K

A powerful tool for automated LLM fuzzing. It is designed to help developers and security researchers identify and mitigate potential jailbreaks in their LLM AP

akto ★ 1.5K

Akto is the fastest growing AI Security platform for your teams to secure AI agents, MCPs, LLMs, Agent skills, Gen AI apps in your organization.

NeuroSploit ★ 1.5K

NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations.

xalgorix ★ 1.3K

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

ai-security-tool ★ 1.3K

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepS

ARTEX ★ 1.3K

ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军

Dark-Moon ★ 1.2K

Open source autonomous AI penetration testing platform. 50+ specialist agents for AI security testing across web, API, cloud, Active Directory, Kubernetes, IoT

stride-gpt ★ 1.1K

An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

agentic-radar ★ 1.1K

A security scanner for your LLM agentic workflows

hol-guard ★ 1.1K

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

safelabs-eval ★ 1.0K

Red-teaming and evaluation framework for AI agents, built around an OWASP-inspired ASI01–ASI10 taxonomy

reconmap ★ 1.0K

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance throu

vuln-bank ★ 992

A deliberately vulnerable banking application designed for practicing Security Testing of Web App, APIs, AI integrated App and secure code reviews. Features com

pipelock ★ 977

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injecti

EasyJailbreak ★ 935

An easy-to-use Python framework to generate adversarial jailbreak prompts.

api-relay-audit ★ 904

Local security audit for AI API relays and LLM proxies: detects prompt injection, model substitution, tool-call rewriting, SSE anomalies, error leakage, and Web

h5i ★ 887

Fast, red-teaming browser built for AI agents, with direct HTTP traffic control, sandboxed execution, and auditable sessions. Pure Rust.

ship-safe ★ 870

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API

Krawl ★ 825

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities usi

code-on-incus ★ 770

Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.

coi ★ 770

Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops t

arcjet-js ★ 698

Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop

vestige ★ 659

Think before doing, prove before saving. Vestige is a local, deterministic safety kernel for AI agents. Every memory write and agent action is recorded in Stra

Adrian ★ 589

Open-source runtime AI agent security tool - monitors and controls AI agents, catching malicious tool use, prompt injection, and policy drift in real time, befo

vArmor ★ 512

vArmor is a cloud-native container hardening system that leverages AppArmor/BPF/Seccomp and NetworkProxy technologies to enforce access control from system call

DockSec ★ 503

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

VerifyWise ★ 373

AI governance made simple, secure, and compliant