agent-governance-toolkit

この文書は README.md の日本語訳です。最新の情報は英語版をご確認ください。 🌍 English | 日本語 | 简体中文 Agent Governance Toolkit へようこそ！ !IMPORTANT パブリックプレビュー — このリポジトリから公開されるすべてのパッケージは Microsoft 署名済みのパブリックプレビューリリース です。プロダクション品質ですが、 GA（一般提供）前に破壊的変更が行われる可能性があります。フィードバックは GitHub issue からお寄せください。 このツールキットとは： ランタイムガバナンスインフラストラクチャ —...

conduit

Conduit Локальная панель управления для ИИ-агентов, пишущих код. Распределение затрат по инженерам · жёсткие бюджеты · контроль исходящего трафика · мониторинг контекстной деградации · экспорт, готовый для аудита — всё внутри вашего VPC. Conduit размещается между вашими ИИ-агентами Claude Code,...

AI-SPM

Orbyx AI SPM - Управление безопасностью ИИ AI-SPM Управление безопасностью искусственного интеллекта AI-SPM — это комплексный подход к обеспечению безопасности и целостности систем искусственного интеллекта ИИ и машинного обучения МО. Он включает непрерывный мониторинг, оценку и улучшение состоян...

MakerChecker

🛡️ MakerChecker AI 代理的开源安全层。 默认拒绝执行、人工审批以及加密签名的审计追踪——确保您的代理仅运行被授权的内容，并且可证明无法自行批准其自身的工作。 网站 · 在线演示 · mc scan · 文档 您的代理继续在其现有框架（LangChain、Claude SDK、CrewAI）中运行。MakerChecker 位于每个工具调用的前后：作为检查点在前，作为签名账本在后。代理仅通过角色 行动，仅执行被授予 的技能，不能超出其限制，也不能批准自身的工作。 🚀 快速入门 1 — 扫描您的代码...

claude-code-guardrails

С тех пор мы создали специальный продукт, который помогает разработчикам лучше управлять разрешениями ИИ, и планируем сделать его open source. Ознакомьтесь с ним наstoplight.ai. Ограничения Claude Code settings.json работает, если: Вы не против редактировать JSON и перезапускать сеансы Claude Cod...

tealtiger

TealTiger SDK de Segurança e Governança para Agentes de IA Governança determinística, proteções, rastreamento de custos e gerenciamento de políticas para aplicações LLM. Código aberto. TypeScript + Python. Funciona com qualquer provedor...

Supply-Chain

Sicurezza della Catena di Fornitura Software Una serie completa di tre libri sulla sicurezza della catena di fornitura software, che copre minacce, difese e governance. Questo manoscritto open-source fornisce a professionisti della sicurezza, sviluppatori e leader organizzativi una guida pratica...

defenseclaw

root@kitploit: / \ / / / || | / / / / / / /// \ / \ / |/ | | | |/ |\ \ /\ / / / // / / / // /| | | |\ \ /| | | | | | \ V V / // // / || |||/| |||,| // DefenseClaw Governance di sicurezza per OpenClaw e runtime AI agentici. Analizza le capacità prima dell'uso, ispeziona il traffico runtime...

APTS

Cos'è OWASP APTS? Uno standard di governance per piattaforme di penetration testing autonome. Definisce cosa questi sistemi devono fare per operare in modo sicuro, trasparente e entro confini definiti, siano essi forniti da vendor, operati come servizio o costruiti internamente da team di sicurez...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

CVE-2026-21753

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

CVE-2026-21753

HCL Hive is affected by weak software supply chain governance , which could result in the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment. The CNA-assigned CVSS 3.1 score is 4.2 (MEDIUM) , reflecting a network vector with high comple...

EUVD-2026-65470

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

CVE-2026-21753 HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

CYBERDUDEBIVASH Script di Audit per Agenti AI di ServiceNow v1.1 Gen 2026 Assicura il tuo futuro AI – Strumento di Audit di livello enterprise con aggiornamenti 2026 Questo script controlla gli Agenti AI di ServiceNow per vulnerabilità come CVE-2025-12420, lacune di governance e rischi di...

OWASP-MCP-Governance-and-Risk-Project

Questo repository non contiene un README...

What happens to your data when you die? (Lock and Code S07E17)

This week on the Lock and Code podcast … You will die. Your data will not. The afterlife of our information is a recent phenomenon, and some of the companies with the most to sort through are still just figuring it out. As far back as 2007, Facebook was forced to reckon with mass grief when users...

Nexora

Nexora Nexora è un sistema intelligente di governance degli endpoint e sicurezza informatica basato su AI, che monitora l'utilizzo del software sui dispositivi, applica una classificazione del rischio basata su policy e genera report strutturati comportamentali e di sicurezza. È progettato per...

Nullify

Nullify Seguro. Transparente. Anulado. Nullify é uma plataforma de código aberto e modular para retenção de dados, exclusão e governança de ciclo de vida. Ela fornece uma estrutura centralizada para descobrir dados, avaliar políticas de retenção, executar ações controladas de ciclo de vida e mant...

Security Bulletin: IBM Db2 and IBM Java SDK used by IBM Security Verify Governance contain multiple vulnerabilities

Summary IBM Security Verify Governance ISVG, now re-branded as IBM Verify Identity Governance IVIG, uses IBM Db2 database and IBM Java SDK. Information about security vulnerabilities affecting IBM Db2 and IBM Java SDK has been published in security bulletins. Vulnerability Details Refer to the...