dianxing

larlarua/

AutoCVE

Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.

apisec-inc/

AI-Surface

Find and govern AI attack surfaces in application code at PR time. Free, OSS, runs offline.

usestrix/

strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

mukul975/

Anthropic-Cybersecurity-Skills

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

0xSteph/

pentest-ai

Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM. No API key needed on MCP path.

CyberSunil/

LLMVault

An intentionally vulnerable OWASP LLM Top 10 training platform for AI Security, Prompt Injection, RAG Security, Agent Security, and GenAI penetration testing.