Trending AI repositories

usestrix/

strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

QuivrHQ/

quivr

Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore: PGVector, Faiss. Any Files. Anyway you want.

gitleaks/

gitleaks

Find secrets with Gitleaks 🔑

mukul975/

Anthropic-Cybersecurity-Skills

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0

eosphoros-ai/

DB-GPT

open-source agentic AI data assistant for the next generation of AI + Data products.

firerpa/

lamda

Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.

superradcompany/

microsandbox

🧱 easy, fast and local-first microVM runtime

j3ssie/

osmedeus

A Modern Orchestration Engine for Security

metorial/

metorial

Connect any AI model to 1200+ integrations (MCP, CLI, API)

stacklok/

toolhive

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

0xSteph/

pentest-ai

Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM. No API key needed on MCP path.

mukul975/

cve-mcp-server

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

OpenOSINT/

OpenOSINT

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 16 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

alinaqi/

maggy

What started as an opinionated Claude Code setup kit is now an autonomous AI engineering command center

provos/

ironcurtain

A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)

TheAuditorTool/

Auditor

Release channel for TheAuditor — see blog.theauditortool.com

Brain0-ai/

brain0

The black box for AI-written code. Passive decision graph linking every commit to the agent prompts behind it: drift detection, DLP audit of what agents read, evidence-driven risk, MCP memory for coding agents, signed provenance attestations. One command, offline by default.

openhackai/

OpenHack

Open Source Agentic Security Scanner

badchars/

darknet-mcp-server

66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, exploit search, stealer logs

arthurpanhku/

dvalincode

Approvable, local-first AI coding agent for regulated teams: policy controls, governed MCP, evidence packs, audit trails, secure remediation, and any OpenAI-compatible model.

WhitzardAgent/

AgentGuard

AgentGuard: Zero-Trust Security Foundation for AI Agents

scadastrangelove/

awesome-ai-security-tools

A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity — autotriage, agent security, AI/ML supply chain, pentest agents, AI SAST, LLM-driven fuzzing, threat intelligence, SOC/SIEM triage, reverse engineering, LLM red-teaming, and more.

noelschwarz/

coral

Coral is an open-source, local-first session bridge that lets AI agents borrow a user's already-authenticated browser sessions on a per-site, per-action, fully audited basis.

tyxak/

remotepower

Feature-rich all-in-one self-hosted server & fleet management (Web UI): patching, monitoring (agent + agentless/SNMP), CVE scanning, CMDB, RMM, alerts & webhooks, Proxmox/VMware, Ansible, compliance & more — the Swiss-army knife to keep your fleet healthy.

bkuan001/

halo-record

Tamper-evident runtime records for AI agents. Hash-chained, dependency-free, verifiable by anyone.