APTS

What is OWASP APTS? A governance standard for autonomous penetration testing platforms. It defines what these systems must do to operate safely, transparently, and within defined boundaries, whether they are delivered by vendors, operated as a service, or built in-house by enterprise security tea...

defenseclaw

root@kitploit: / \ / / / || | / / / / / / /// \ / \ / |/ | | | |/ |\ \ /\ / / / // / / / // /| | | |\ \ /| | | | | | \ V V / // // / || |||/| |||,| // DefenseClaw Security governance for OpenClaw and agentic AI runtimes. Scan capabilities before use, inspect runtime traffic, and export...

tealtiger

TealTiger AI Agent Security & Governance SDK Deterministic governance, guardrails, cost tracking, and policy management for LLM applications. Open source. TypeScript + Python. Works with any provider...

agent-governance-toolkit

🌍 English | 日本語 | 简体中文 | 한국어 Agent Governance Toolkit Ship agents to production without losing sleep 🚀Quick Start · 📋 Specifications · 📦 PyPI · 📝 Changelog !IMPORTANT Public Preview -- production-quality public preview releases. May have breaking changes before GA. Policy enforcement, identity,...

MakerChecker

🛡️ MakerChecker The open-source security layer for AI agents. Deny-by-default enforcement, human approvals, and a cryptographically signed audit trail — so your agent runs only what it's granted and provably can't approve its own work. Website · Live Demo · mc scan · Docs Your agents keep running...

claude-code-guardrails

We have since built a dedicated product to help developers manage AI permissions better, which we intend to make open source. Check it out atstoplight.ai. Claude Code Guardrails settings.json works if: You're fine editing JSON and killing Claude Code sessions every time policy changes Your securi...

conduit

Conduit The on-prem control plane for AI coding agents. Per-engineer cost attribution · hard budgets · egress governance · context-rot observability · audit-ready exports — all inside your VPC. Conduit sits between your AI coding agents Claude Code, Cursor, Codex, Aider and whatever provider you...

AI-SPM

Orbyx AI SPM - AI Security Posture Management AIセキュリティポスチャ管理（AI-SPM）は、人工知能（AI）および機械学習（ML）システムのセキュリティと整合性を維持するための包括的なアプローチです。AIモデル、データ、インフラストラクチャのセキュリティポスチャを継続的に監視、評価、改善することを含みます。AI-SPMには、AI導入に関連する脆弱性、設定ミス、潜在的なリスクの特定と対処、および関連するプライバシーとセキュリティ規制への準拠の確保が含まれます。...

Nullify

Nullify Secure. Transparent. Nullified. Nullify is an open source, modular data retention, deletion, and lifecycle governance platform. It provides a centralized framework for discovering data, evaluating retention policies, executing controlled lifecycle actions, and maintaining verifiable audit...

Nexora

Nexora Nexora is an AI-driven enterprise endpoint governance and security intelligence system that monitors software usage across machines, applies policy-based risk classification, and generates structured behavioral and security reports. It is designed for environments where organizations need...

cloudquery

CloudOps, without the chaos CloudQuery is a cloud asset inventory built for platform teams. Sync your cloud infrastructure metadata into your data warehouse, powering insights and automation. Unify data and provide context across AWS, Azure, GCP, and 70+ cloud and SaaS sources such as Wiz, Finout...

OWASP-MCP-Governance-and-Risk-Project

此存储库没有 README。...

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

CYBERDUDEBIVASH ServiceNow AI Agent Audit Script v1.1 Jan 2026 Secure Your AI Future – Enterprise-Grade Audit Tool with 2026 Updates This script audits ServiceNow AI Agents for vulnerabilities like CVE-2025-12420, governance gaps, and compliance risks. Powered by CYBERDUDEBIVASH – your global...

runeward

面向 AI 智能体的开源治理框架。 为任意 AI 智能体加上可强制执行的策略、人工审批、隔离执行、预算和签名证据。Runeward 可与现有的智能体或多智能体框架配合使用，而无需引入新的模型或编排栈。 一条命令即可验证 前置条件：运行中的 Docker/Podman 引擎以及 runeward 二进制文件。 root@kitploit: runeward quickstart 该命令会创建 .runeward/quickstart.toml，检查策略、运行时、镜像和状态路径，运行一条被允许的命令，证明破坏性命令在执行前被拒绝，并验证签名审计追踪。除非传入...

TriSuElla-AIDLCA-Framework

🔱 TriSuElla-AIDLCA 框架 AI 驱动的开发生命周期与自主智能体治理（LLMSecOps） 软件版本 ：3.2.0 | 框架版本 ：3.2.0 | 状态 ：制度化（生产就绪、DevSecOps 就绪且经 CI 验证） 合并不变量 ：305 项检查 | 规则 ：204 条 | 领域族 ：26 个 -success.svg -blue.svg 🏛️ 执行概览 TriSuElla-AIDLCA 框架 是一套企业级、策略治理的架构与安全标准，面向 AI 辅助软件工程与自主多智能体系统 。它确保机器智能以确定性执行、零信任密码学验证以及协调的人类在环治理方式运行。...

conductai

Conduct Governance for AI agents. Ship in 60 seconds. Built for engineering teams. Install in 10 minutes. Evidence for the CISO from day one. 60-second trial no install root@kitploit: curl -fsSL conductai.ai/install | sh Prompts for email + company, provisions a 7-day trial workspace, drops...

Supply-Chain

Software Supply Chain Security A comprehensive three-book series on software supply chain security, covering threats, defenses, and governance. This open-source manuscript provides security professionals, developers, and organizational leaders with practical guidance for securing modern software...

CVE-2026-55658

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In 3e595f3 and prior, when a streaming proposal is funded, the cluster of streaming contracts moves real pool funds into the...

CVE-2026-57445 Gardens v2: Approve-side dispute resolution drains active streaming escrow reserve

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In dfba919e218e20d52db9f7b2e8d292d45a46c91b and prior, normal beneficiary payout paths in StreamingEscrow preserve depositAmount...

CVE-2026-57445

Gardens v2 is a modular governance framework for managing multiple governance pools. In version dfba919e218e20d52db9f7b2e8d292d45a46c91b and prior, the StreamingEscrow component's approve-side dispute resolution path drains the entire available escrow balance to the proposal beneficiary, whereas ...