Supply-Chain

Sécurité de la chaîne d'approvisionnement logicielle Une série complète de trois livres sur la sécurité de la chaîne d'approvisionnement logicielle, couvrant les menaces, les défenses et la gouvernance. Ce manuscrit open source fournit aux professionnels de la sécurité, aux développeurs et aux...

agent-governance-toolkit

🌍 English | 日本語 | 简体中文 | 한국어 Agent Governance Toolkit Déployez des agents en production sans perdre le sommeil 🚀Démarrage rapide · 📋 Spécifications · 📦 PyPI · 📝 Changelog -brightgreen !IMPORT...

conduit

Conduit 面向AI编码代理的本地控制平面。 按工程师计费 · 硬预算 · 出站治理 · 上下文膨胀可观测性 · 审计就绪导出 —— 全部位于您的VPC内。 Conduit 位于您的 AI 编码代理（Claude Code、Cursor、Codex、Aider）与您已使用的任何提供商（Anthropic、OpenAI、Bedrock、Azure —— 或您现有的 LiteLLM / Portkey 部署）之间。只需一个环境变量即可接入，客户端无需更改，提示和补全内容永不存储。 root@kitploit: Claude Code / Cursor / Codex │...

AI-SPM

Orbyx AI SPM - Gestion de la posture de sécurité de l'IA La gestion de la posture de sécurité de l'IA AI-SPM est une approche globale pour maintenir la sécurité et l'intégrité des systèmes d'intelligence artificielle IA et d'apprentissage automatique ML. Elle implique une surveillance, une...

MakerChecker

🛡️ MakerChecker AIエージェント向けオープンソースのセキュリティレイヤー。 デフォルト拒否による強制、人間による承認、暗号署名された監査証跡 — エージェントは許可された操作のみを実行し、自身の作業を承認できないことを証明可能 にします。 ウェブサイト · ライブデモ · mc scan · ドキュメント あなたのエージェントは、既存のフレームワーク（LangChain、Claude SDK、CrewAI）でそのまま動作し続けます。MakerCheckerは、すべてのツール呼び出しの前にチェックポイントとして、後ろには署名付き台帳として配置されます。エージェントはロール...

claude-code-guardrails

С тех пор мы создали специальный продукт, который помогает разработчикам лучше управлять разрешениями ИИ, и планируем сделать его open source. Ознакомьтесь с ним наstoplight.ai. Ограничения Claude Code settings.json работает, если: Вы не против редактировать JSON и перезапускать сеансы Claude Cod...

tealtiger

TealTiger SDK de Segurança e Governança para Agentes de IA Governança determinística, proteções, rastreamento de custos e gerenciamento de políticas para aplicações LLM. Código aberto. TypeScript + Python. Funciona com qualquer provedor...

defenseclaw

root@kitploit: / \ / / / || | / / / / / / /// \ / \ / |/ | | | |/ |\ \ /\ / / / // / / / // /| | | |\ \ /| | | | | | \ V V / // // / || |||/| |||,| // DefenseClaw Governance di sicurezza per OpenClaw e runtime AI agentici. Analizza le capacità prima dell'uso, ispeziona il traffico runtime...

APTS

Cos'è OWASP APTS? Uno standard di governance per piattaforme di penetration testing autonome. Definisce cosa questi sistemi devono fare per operare in modo sicuro, trasparente e entro confini definiti, siano essi forniti da vendor, operati come servizio o costruiti internamente da team di sicurez...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

CVE-2026-21753

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

CVE-2026-21753

HCL Hive is affected by weak software supply chain governance , which could result in the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment. The CNA-assigned CVSS 3.1 score is 4.2 (MEDIUM) , reflecting a network vector with high comple...

EUVD-2026-65470

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

CVE-2026-21753 HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

CYBERDUDEBIVASH Script di Audit per Agenti AI di ServiceNow v1.1 Gen 2026 Assicura il tuo futuro AI – Strumento di Audit di livello enterprise con aggiornamenti 2026 Questo script controlla gli Agenti AI di ServiceNow per vulnerabilità come CVE-2025-12420, lacune di governance e rischi di...

OWASP-MCP-Governance-and-Risk-Project

Questo repository non contiene un README...

What happens to your data when you die? (Lock and Code S07E17)

This week on the Lock and Code podcast … You will die. Your data will not. The afterlife of our information is a recent phenomenon, and some of the companies with the most to sort through are still just figuring it out. As far back as 2007, Facebook was forced to reckon with mass grief when users...

Nexora

Nexora Nexora è un sistema intelligente di governance degli endpoint e sicurezza informatica basato su AI, che monitora l'utilizzo del software sui dispositivi, applica una classificazione del rischio basata su policy e genera report strutturati comportamentali e di sicurezza. È progettato per...

Nullify

Nullify Seguro. Transparente. Anulado. Nullify é uma plataforma de código aberto e modular para retenção de dados, exclusão e governança de ciclo de vida. Ela fornece uma estrutura centralizada para descobrir dados, avaliar políticas de retenção, executar ações controladas de ciclo de vida e mant...

Security Bulletin: IBM Db2 and IBM Java SDK used by IBM Security Verify Governance contain multiple vulnerabilities

Summary IBM Security Verify Governance ISVG, now re-branded as IBM Verify Identity Governance IVIG, uses IBM Db2 database and IBM Java SDK. Information about security vulnerabilities affecting IBM Db2 and IBM Java SDK has been published in security bulletins. Vulnerability Details Refer to the...