Open source agent-security projects

Every project in the registry tagged agent-security, ranked by real GitHub adoption.

projects 14 combined stars ★ 50K refresh nightly
01 SkillSpector ★ 24K

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in

last push7 hours ago languagePython licenseApache-2.0
02 AI-Infra-Guard ★ 7.3K

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

last push15 hours ago languagePython licenseApache-2.0
03 nono ★ 4.8K

secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.

last push10 hours ago languageRust licenseApache-2.0
04 agent-beacon ★ 3.1K

The cross-harness self-improving memory layer for AI agents.

last push8 hours ago languageGo licenseMIT
05 ADR ★ 2.1K

ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.

last push3 days ago languagePython licenseApache-2.0
06 agentic_security ★ 2.0K

Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪

last push33 hours ago languagePython licenseApache-2.0
07 hol-guard ★ 1.1K

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

last push7 hours ago languagePython licenseApache-2.0
08 safelabs-eval ★ 1.0K

Red-teaming and evaluation framework for AI agents, built around an OWASP-inspired ASI01–ASI10 taxonomy

last push9 days ago languagePython licenseApache-2.0
09 pipelock ★ 978

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injecti

last push7 hours ago languageGo licenseApache-2.0
10 ship-safe ★ 870

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API

last push17 days ago languageJavaScript licenseMIT
11 arcjet-js ★ 698

Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop

last push5 days ago languageTypeScript licenseApache-2.0
12 agent-safe-pipeline ★ 672

An execution-authority gateway for AI agents and APIs. It intercepts consequential HTTP actions, asks Decionis whether they are authorized, and forwards exactly

last push21 hours ago languageTypeScript licenseApache-2.0
13 vestige ★ 659

Think before doing, prove before saving. Vestige is a local, deterministic safety kernel for AI agents. Every memory write and agent action is recorded in Stra

last push12 hours ago languageRust licenseAGPL-3.0
14 Adrian ★ 589

Open-source runtime AI agent security tool - monitors and controls AI agents, catching malicious tool use, prompt injection, and policy drift in real time, befo

last push13 days ago languagePython licenseApache-2.0

Related tags

← all tags

Frequently asked questions

How many open source agent-security projects are there?

This registry tracks 14 projects tagged agent-security, with 49,850 GitHub stars between them. The most-adopted is SkillSpector at 23,981 stars.

Are these agent-security projects free to use?

Yes — 14 of the 14 carry an explicit open-source licence across 3 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.

Which agent-security project should I choose?

The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.

Are these agent-security projects still maintained?

14 of the 14 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.