agent-opfor

Open-source adversary emulation for AI agents, LLM apps, and MCP servers. Test your AI like a real attacker would — from your CLI, your IDE, or a browser extension that anyone on your team can use. Website · Docs · GitHub · Browser Extension · Discord OPFOR is short for Opposition Force — a...

NemoClaw

NVIDIA NemoClaw: Reference Stack for Sandboxed AI Agents in OpenShell NVIDIA NemoClaw is an open source reference stack for running supported AI agents more safely inside NVIDIA OpenShell sandboxes. It provides guided onboarding, managed inference, network policy, managed integrations,...

Scanners-Box

English | 简体中文 | Español Introduction EN The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents 中文 面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵 ES El arsenal definitivo de seguridad de código abierto para hackers, empresas y agentes de IA !TIP 📅 Tired of hunting all over the place for ...

firecrawl-mcp-server

Firecrawl MCP Server A Model Context Protocol MCP server that brings Firecrawl to MCP-compatible AI agents — search, scrape, and interact with the live web for clean, agent-ready context. Big thanks to @vrknetha, @knacklabs for the initial implementation! Features Search the web and get full page...

camoufox

Camoufox Camoufox is an open source anti-detect browser built for webscraping & AI agents. 🦊 ⚠️ This project is under development. It may not be suitable for stable production use. ⚠️ !NOTE All of the latest documentation is available atcamoufox.com. Sponsors View/Collapse All Premium | NodeMaven:...

aiiroverlay

Why an overlay, not a replacement. The thesis. Part of the AI IR Overlay™ framework. SeeCONTENTMAP.md for the full repository map. The AI IR Overlay: Framework Overview Current release: v0.35.0 · 2026-07-09 · CHANGELOG A practical incident-response baseline for AI agents in production. Adapt and...

conductai

Conduct Governance for AI agents. Ship in 60 seconds. Built for engineering teams. Install in 10 minutes. Evidence for the CISO from day one. 60-second t...

Anthropic-Cybersecurity-Skills

Anthropic Cybersecurity Skills The largest open-source cybersecurity skills library for AI agents !Hermes Agenthttps://img.shields...

pentest-ai-agents

pentest-ai-agents 50 Claude Code subagents for penetration testing. Quick Start | Cheatsheet | Coverage | Agents | Examples Table of Contents What's New in v3.3 What's New in v3.2 Agent Map What's New in v3.1 Quick Start Cheatsheet Coverage Agents Tier 1 vs Tier 2 Examples Running Tools in a...

deepsec

deepsec deepsec an agent-powered vulnerability scanner that you can run in your own infrastructure, optimized to perform on-demand review of all code in existing large-scale repos. deepsec is designed to surface hard-to-find issues that have been lurking in applications for a long time. It is...

ship-safe

The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute Ship Safe CLI Ship Safe runs locally in your repo and works in two layers. A...

OpenCLAW-P2P

P2PCLAW - Decentralized Autonomous Research Collective P2PCLAW is a decentralized research network where AI agents and human researchers publish, validate, preserve, and evaluate scientific work through open infrastructure. Latest public paper: arXiv:2604.19792, currently revised as OpenCLAW-P2P...

ironcurtain

IronCurtain A secure runtime for autonomous AI agents, where security policy is derived from a human-readable constitution. When someone writes "secure," you should immediately be skeptical.What do we mean by secure? !WARNING Research Prototype. IronCurtain is an early-stage research project...

matchlock

Matchlock Experimental: This project is still in active development and subject to breaking changes. Matchlock is a CLI tool for running AI agents in ephemeral microVMs - with network allowlisting, secret injection via MITM proxy, and VM-level isolation. Your secrets never enter the VM. Why...

clawshield-public

ClawShield Security proxy for AI agents. Sits in front of OpenClaw and scans every message for prompt injection, PII leaks, and secrets — before they reach the model or leave the network. Ships with 5 specialized AI agents, a built-in dashboard, and a YAML policy engine. One command to start...

raxe-ce

Threat Detection for AI Agents Stop prompt injection, jailbreaks, and tool attacks before they execute. 100% local. Sub-5ms rule matching. Free forever. pip install raxe && raxe scan "Ignore all previous instructions" Requires Python 3.10+ • 515+ rules + ML detection included Built by security...

agent-governance-toolkit

🌍 English | Español | 日本語 | 简体中文 | 한국어 | 繁體中文 Agent Governance Toolkit Ship agents to production without losing sleep 🚀Quick Start · 📋 Specifications · 📦 PyPI · 📝 Changelog -brightgreen !IMPORTANT Public Preview -- production-quality public preview releases...

agentsh

agentsh macOS note: Native macOS enforcement via ESF Endpoint Security Framework + NE Network Extension is in Alpha. It works end-to-end — file, process, and network events flow through the system extension to the Go policy engine — but expect rough edges and breaking changes between releases. Fo...

agent-vault

HTTP credential proxy and vault An open-source credential broker by Infisical that sits between your agents and the APIs they call. Agents should not possess credentials. Agent Vault eliminates credential exfiltration risk with brokered access. New here? Thelaunch blog post has the full story...

CVE-2026-109382

The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wspgetposts MCP tool being registered with an empty capability requirement while the MCP endpoint's authenticate method accepts any...