prismor

Prismor Runtime security for Claude Code, Codex, Langchain and other AI agents frameworks/harness. Prismor is highly customizable based on user's own policies. Observe or enforce mode to see agent activity in a local self-serve dashboard Website • Onboard with Skill...

KubeArmor

KubeArmor 是一个云原生运行时安全强制系统，在系统层面限制 pod、容器和节点（虚拟机）的行为（如进程执行、文件访问和网络操作）。 KubeArmor 利用 Linux 安全模块（LSM）（如 AppArmor、SELinux 或 BPF-LSM）来强制实施用户指定的策略。KubeArmor 通过利用 eBPF 生成带有容器/pod/命名空间身份的丰富告警/遥测事件。 | ---|--- 💪 加固基础设施 ⛓️ 保护关键路...

tracee

在继续之前，请考虑给我们一个 GitHub 星标 ⭐️。谢谢！ 关于 Tracee Tracee 是一个运行时安全和可观测性工具，帮助您了解系统和应用程序的行为。 它使用 eBPF 技术 接入系统，并将这些信息以事件的形式暴露出来供您使用。 事件范围从事实性的系统活动事件到检测可疑行为模式的复杂安全事件。 要了解有关 Tracee 的更多信息，请查看文档。 快速开始 要快速尝试 Tracee，请使用以下片段之一。有关更完整的安装指南，请查看安装部分。 Tracee 应该在大多数常见的 Linux 发行版和内核上运行。有关兼容性信息，请参阅先决条件页面。Mac 用户，请阅读此常见问题。 使用...

httptoolkit

HTTP Toolkit !HTTP Toolkit has received funding from NLnet as part of NGI Zero...

anticipator

Anticipator 多智能体AI系统的运行时安全。 Anticipator 可检测提示注入、凭证泄露、编码攻击、同形文字欺骗、路径遍历以及 LangGraph 管道中的异常智能体行为——在它们成为安全事件之前。 无需大语言模型、无需嵌入、无需外部 API。完全本地化、完全确定性，每条消息检测耗时低于 5 毫秒。 ⚡ 在管道中发现异常？提交 Issue——我们期待看到真实世界的检测案例。 为什么选择 Anticipator 多智能体系统引入了一种新型安全问题。当智能体之间传递消息时，其中任何一条消息都可能携带注入攻击、泄露的凭证、编码载荷或角色操纵——而现有工具并未监控此类流量。...

opa

Open Policy Agent Open Policy Agent OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. OPA is proud to be a graduated project in the Cloud Native Computing Foundation CNCF landscape. For details read the CNCF...

kestrel

La visibilidad a nivel de kernel de Falco, con la interfaz en vivo que las herramientas nativas del kernel no incluyen. Inicio rápido · Especificación · Vistas · Hoja de ruta Kestrel rastrea eventos del kernel ejecución de procesos, acceso a archivos, conexiones de red con un agente eBPF y los...

tracehound

面向高速API的确定性运行时安全缓冲区 外部系统发出威胁信号。Tracehound保留证据。 网站 · 文档索引 · API参考 · 配置 · RFC · 安全 · 更新日志 Tracehound是一个无需决策的取证运行时，位于上游检测和下游响应之间。它不分类流量、不应用启发式规则、也不替代WAF。它接收明确的威胁信号，隔离证据，并保留防篡改的操作记录，而不会成为主机应用程序的新拒绝服务向量。...

cicd-sensor

This repository does not have a README...

EvoRiskBench: An Evolving Benchmark for Runtime Security Risks in Workspace Agents

Workspace agents combine large language models with execution harnesses to perform stateful, multi-step tasks that access or modify external resources. Existing benchmarks leave gaps in executable coverage of their runtime security risks, while evolving model capabilities, harnesses, tools, and...

prismor v1.51.0

Prismor Runtime security for Claude Code, Codex, Langchain and other AI agents frameworks/harness. Prismor is highly customizable based on user's own policies. Observe or enforce mode to see agent activity in a local self-serve dashboard Website • Onboard with Skill...

falco v0.45.0-rc1

Falco Falco is a cloud native runtime security tool for Linux operating systems. It is designed to detect and alert on abnormal behavior and potential security threats in real-time. At its core, Falco is a kernel monitoring and detection agent that observes events, such as syscalls, based on cust...

prismor v1.44.0

Prismor Runtime security for Claude Code, Codex, Langchain and other AI agents frameworks/harness. Prismor is highly customizable based on user's own policies. Observe or enforce mode to see agent activity in a local self-serve dashboard Website • Onboard with Skill...

kubescape v4.0.13

Kubescape Comprehensive Kubernetes Security from Development to Runtime Kubescape is an open-source Kubernetes security platform that pr...

KubeArmor v1.7.5-rc2

KubeArmor is a cloud-native runtime security enforcement system that restricts the behavior such as process execution, file access, and networking operations of pods, containers, and nodes VMs at the system level. KubeArmor leverag...

Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026

Security teams are overwhelmed with findings but still struggle to answer a simple question: which risks matter right now? A vulnerability alone is rarely the problem. The same vulnerability running in production, exposed through a misconfiguration or over-permissioned identity, is a real path to...

Microsoft named a Leader in the Frost Radar™: Cloud Workload Protection Platforms, 2026

Security teams are overwhelmed with findings but still struggle to answer a simple question: which risks matter right now? A vulnerability alone is rarely the problem. The same vulnerability running in production, exposed through a misconfiguration or over-permissioned identity, is a real path to...

kubescape v4.0.12

Kubescape Comprehensive Kubernetes Security from Development to Runtime Kubescape is an open-source Kubernetes security platform that pr...

prismor v1.39.0

Prismor Runtime security hooks for Claude Code, Codex, and other AI coding agents. Prismor can also be used in observe mode to see agent session activity and dangerous actions in a local self-serve dashboard Website • Onboard with Skill !Trae / Trae CNht...

prismor v1.38.1

Prismor Runtime security hooks for Claude Code, Codex, and other AI coding agents. Prismor can also be used in observe mode to see agent session activity and dangerous actions in a local self-serve dashboard Website • Onboard with Skill !Trae / Trae CNht...