kube-bench

kube-bench is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark. Tests are configured with YAML files, making this tool easy to update as test specifications evolve. CIS Scanning as part of Trivy and the Trivy Operator Triv...

trivy-operator

Kubernetes-native security toolkit. Documentation Introduction The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes Custom Resource Definitions, which become accessible through the Kubernete...

MEA-Bench

MEA-Bench: A Benchmark for Model Extraction Attacks This repository provides a unified benchmark for model extraction attacks, defenses, adaptive attacks, and evaluation. The public interface is organized around a small number of portable commands. Method-specific Python modules and legacy run...

benign-instruction-bench

Passing the Test You Trained On Re-evaluating prompt-injection detectors where LLM agents actually use them: on the tool outputs an agent reads. Teams pick injection detectors by their benchmark scores. We check whether those scores predict behavior inside an agent, and find that they mostly...

docker-bench-security

Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...

dynast-bench

DynAST-Bench A DAST benchmark of intentionally-vulnerable apps with ground-truth answer keys for scoring scanners. ⚠️ This repository contains DELIBERATELY INSECURE applications. They exist only to benchmark security tooling - DAST scanners, SAST engines, and LLM security agents. Every app binds t...

terminal-bench-2

Terminal-Bench 2.0 | | | | || || | |/ \ '| ' | | ' \ / | | || || | | / | | | | | | | | | | | | | | || || |||| || || |||| ||,|| |||| || | | | | \ / \ \\ | \ / \ ' \ / | ' \ || | | | \\ | | | / | | | | | | | / / | || | \ \ |/ || |||| || |/ \\ Terminal-Bench is a popular benchmark for...

cve-bench

CVE-Bench A benchmark for evaluating LLM agents on fixing real-world security vulnerabilities. Agents run inside sandboxed Docker containers and are scored against the maintainer's security test suite. Requirements Python 3.12+ Docker OPENAIAPIKEY, ANTHROPICAPIKEY, and/or POOLSIDEAPIKEY in your...

chain-bench

📖 Documentationdocs Chain-bench is an open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark. The auditing focuses on the entire SDLC process, where it can reveal risks from code time into deploy time. To win the...

FuzzingBrain-Bench

FuzzingBrain Bench A benchmark for LLM-driven vulnerability reproduction on 77 real zero-day bugs across 43 open-source projects C / C++ / Java. Each challenge gives the agent only the fuzz harness the target and the project source at the vulnerable revision — no patch, no fix commit, no target...

EpiReal-Bench

FALSE CLAIMS, CREDIBLE IMAGES: A RED-TEAMING BENCHMARK FOR COMMERCIAL IMAGE GENERATORS Abstract Image-generation models can now produce text-rich, natural-looking visual artifacts that are hard to distinguish from real-world evidence, such as news reports and textbook pages. Yet, the same...

srikanth-lingala__zip4j_CVE-2018-1002202_1-3-2

zip4j This repository contains decompiled source code for the zip4j library versions 1.3.2 vulnerable and 1.3.3 fixed for CVE-2018-1002202, for the CWE-Bench-Java dataset. The original zip4j repository on Github doesn't include code from these versions. Versions Version 1.3.2 Vulnerable Tag : 1.3...

AutoRedClaw: Automated Red-Teaming for Claw-Style Agents

Agent systems are shifting from task-scoped tool-use agents to persistent, personalized assistants such as OpenClaw. These claw-style agents maintain configuration files e.g., AGENTS.md, long-term memory, and reusable skills. Once poisoned, this persistent state is repeatedly reloaded into the...

docker-bench-security

Docker Bench for Security Docker Bench for Security es un script que verifica docenas de buenas prácticas comunes en torno al despliegue de contenedores Docker en producción. Todas las pruebas están automatizadas y se basan en el CIS Docker Benchmark v1.6.0. Lo ponemos a disposición como una...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: postgres-operator, crossplane-provider-azure-marketplaceordering, crossplane-provider-aws-timestreamwrite-fips, crossplane-provider-aws-servicecatalog-fips, clickhouse-operator-fips, harvester, longhorn-share-manager, kubevirt-cdi-controller-fips,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: postgres-operator, crossplane-provider-azure-marketplaceordering, crossplane-provider-aws-timestreamwrite-fips, crossplane-provider-aws-servicecatalog-fips, clickhouse-operator-fips, harvester, longhorn-share-manager, kubevirt-cdi-controller-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: postgres-operator, crossplane-provider-azure-marketplaceordering, crossplane-provider-aws-timestreamwrite-fips, crossplane-provider-aws-servicecatalog-fips, clickhouse-operator-fips, harvester, longhorn-share-manager, kubevirt-cdi-controller-fips,...

CVE-2026-78659 vulnerabilities

Vulnerabilities for packages: cilium, terraform-provider-random, splunk-otel-collector, gitness, trivy, crossplane-provider-azure-sql, nodetaint, argo-cd, metrics-agent, crossplane-provider-aws-dynamodb, thanos-operator, opentelemetry-operator, terraform-provider-grafana, xeol,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: cilium, terraform-provider-random, splunk-otel-collector, gitness, trivy, crossplane-provider-azure-sql, nodetaint, argo-cd, metrics-agent, crossplane-provider-aws-dynamodb, thanos-operator, opentelemetry-operator, terraform-provider-grafana, xeol,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: cilium, terraform-provider-random, splunk-otel-collector, gitness, trivy, crossplane-provider-azure-sql, nodetaint, argo-cd, metrics-agent, crossplane-provider-aws-dynamodb, thanos-operator, opentelemetry-operator, terraform-provider-grafana, xeol,...