#ai-security

N

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on…

W

OWASP Foundation web repository

T

ToolHive is an application that allows you to install, manage and run MCP servers and connect them to AI agents

G

A Geiger counter for AI agents, one read-only command that inventories every agent, MCP server, plugin, and AI extension on a machine

D

Govern consequential AI agent actions in Docker with deterministic policy, human approval, and signed Decision Dossiers.

M

See what your AI agents can access. Scan MCP configs for exposed secrets, shadow APIs, and AI models. Generate AI-BOMs for compliance.

C

Build Secure and Compliant AI agents and MCP Servers. YC W23

A

Agentic AI research papers, benchmarks, frameworks, and tools curated across 24 domains.

M

CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.

A

Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS, runs offline.

K

Local-first MCP password and credential manager for AI agents. Use passwords, API keys, SSH identities, and TOTP without exposing hidden plaintext to the model.

S

SAIL V2 (Secure AI Lifecycle) as an agent skill, the full 91-risk catalog for AI/agent gap assessments, security roadmaps, and compliance checklists. Installs on Claude Code…

T

27 scope-enforced AI agents that run the full pentest kill-chain (recon → exploit → post-ex → DFIR → report) as a one-command Claude Code plugin. Backed by 754 MITRE-mapped skills.

M

Testing and observability for multi-agent delegation, MCP tools, permissions, sandboxed actions, prompts, and workflow replay.

D

Governance gateway for AI agents, bounded, auditable, session-aware control with MCP proxy, shell proxy & HTTP API. Works with Cursor, Claude Code, Codex, and any…

R

RedTeam-Agent: AI-Powered Autonomous Red Team Framework via Model Context Protocol. AI红队与内网渗透自动化框架，支持 gogo, fscan, httpx, nuclei, impacket, playwright 等 15+ 渗透工具，让 LLM 直接化身安全审计黑客。

O

44 plug-and-play skills for OpenClaw, self-modifying AI agent with cron scheduling, security guardrails, persistent memory, knowledge graphs, and MCP health monitoring. Your…

M

MCP Security Solution for Agentic AI, real-time proxying, behavior analysis, and malicious tool detection

H

Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.

D

Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys and risky functions, and returns a…

T

Discover, govern and control access to MCP servers and agent skills across your organization

T

A curated collection of AI SecOps 24 SKILL.md capabilities for security work offensive security, SOC and detection engineering, cloud and Kubernetes hardening, DFIR, threat…

S

A Claude Code skill that security-audits vibe-coded SaaS apps. 50 common ways AI-generated apps get pwned, turned into a repeatable checklist, severity scoring, and findings…

M

Highly isolated Linux container environments optimized specifically for mcp-servers. Secure AI agent tool execution.