vxcontrol / pentagi

Self-hosted multi-agent system that autonomously plans and runs penetration tests using tools like nmap, Metasploit and sqlmap in Docker.

Asymptote-Labs / agent-beacon

Open-source memory layer that captures coding-agent session history across harnesses and turns it into reusable knowledge for future agents.

golang / go

The Go programming language: an open source, statically typed language and toolchain for building simple, reliable, and efficient software.

jiwoochris / artex-global

ARTEX 한국어판 · AI 자율 침투 테스트 프레임워크(upstream: Autumn-27/ARTEX, AGPL-3.0)

gitleaks / gitleaks

Scans git repos, files, and stdin for hardcoded secrets such as passwords, API keys, and tokens.

trhhubsd / ARTEX

ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军

alibaba / open-code-review

Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.

github / github-mcp-server

Official MCP server that lets AI tools read repositories, manage issues and pull requests, and query GitHub Actions and security data.

Armur-Ai / Pentest-Swarm-AI

Autonomous API and web-app penetration testing tool that runs a swarm of AI agents to chain exploits and prove vulnerabilities.

CarterPerez-dev / Cybersecurity-Projects

Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Gamified Cybersecurity learning 👇

Autumn-27 / ScopeSentry

Distributed security asset discovery platform covering subdomain enumeration, port scanning, vulnerability scanning, and page monitoring.

kenn-io / agentsview

Local-first browser and analytics tool for searching, costing, and tracking sessions from AI coding agents like Claude Code and Codex.

google / agentmesh

Agent Mesh is a private network that lets AI agents publish and discover tools and models, with verifiable node identities.

superplanehq / superplane

Open source factory for one-shot engineering

AIPentest / CyberStrikeAI

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

OrchestratorInc / agent-orchestrator

Open-source (Apache-2.0) orchestrator for Claude Code, Codex & 30+ coding agents. Plan, run and supervise agent teams from task to merged PR. Desktop (macOS, Windows, Linux) + iPhone & Android apps.

aquasecurity / trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

esengine / DeepSeek-Reasonix

A reliable coding agent for complex software engineering tasks.

Gentleman-Programming / gentle-ai

Gentle-AI configures the AI coding agents you already use: Claude Code, Cursor, OpenCode, Codex, Pi, and more. Choose persistent memory, Organic-Driven Development, curated skills, MCP servers, personas, and optional bounded review. Open source, no agent lock-in.

larksuite / cli

Official command-line tool for Lark/Feishu covering Messenger, Docs, Base, Sheets, Calendar, Mail, Tasks and Meetings, usable by humans and AI agents.

hashicorp / terraform

Terraform core: a CLI and graph engine for declaring, planning, and applying infrastructure changes from versioned configuration files.

cli / cli

GitHub’s official command line tool

majd / ipatool

Command-line tool that allows you to search for iOS, iPadOS, tvOS, watchOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages.

MichaelKinsy / PiG

PiG (Pi in Go) is a faithful Go port of upstream Pi, the TypeScript codebase behind the Pi coding agent. It is a parity-bound translation, not a rewrite: upstream behavior is the contract, and Go is the implementation language.

trufflesecurity / trufflehog

Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.

guohuiyuan / go-music-dl

Go tool that searches and downloads music from many streaming platforms via CLI, TUI, Web, or desktop apps.

matlab / matlab-mcp-server

Run MATLAB® using AI applications with the official MATLAB MCP Server from MathWorks®. This MCP server for MATLAB supports a wide range of coding agents like Claude Code® and Visual Studio® Code.

heartleo / zlib

A command-line tool for Z-Library. Search, download, send to Kindle, and integrate with AI agents.

gotenberg / gotenberg

A developer-friendly API for converting many document formats into PDF files, and more!

anchore / grype

A vulnerability scanner for container images and filesystems

komari-monitor / komari

A simple server monitor tool.

shadow1ng / fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

ArvinLovegood / go-stock

🦄🦄🦄AI赋能股票分析：AI加持的股票分析/选股工具。股票行情获取，AI热点资讯分析，AI资金/财务分析，涨跌报警推送。支持A股，港股，美股。支持市场整体/个股情绪分析，AI辅助选股等。数据全部保留在本地。支持DeepSeek，OpenAI， Ollama，LMStudio，AnythingLLM，硅基流动，火山方舟，阿里云百炼等平台或模型。

Christ9038 / Ydisks-Xianyu-Helper

闲鱼多账号自动发货、消息回复系统——基于 Go 与 React 构建

pipelab-org / pipelock

Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.

podman-container-tools / podman

Podman: A tool for managing OCI containers and pods.

getsops / sops

Simple and flexible tool for managing secrets

coder / coder

Secure environments for developers and their agents

kopia / kopia

Cross-platform backup tool for Windows, macOS & Linux with fast, incremental backups, client-side end-to-end encryption, compression and data deduplication. CLI and GUI included.

89luca89 / distrobox

Use any linux distribution inside your terminal. Enable both backward and forward compatibility with software and freedom to use whatever distribution you’re more comfortable with. Mirror available at: https://gitlab.com/89luca89/distrobox

anchore / syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Gaurav-Gosain / tuios

A Go terminal multiplexer and tiling window manager with daemon-backed sessions and a shared Inbox for coding agents running in its panes.

nicocha30 / ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

skyhook-io / radar

The missing open-source Kubernetes UI with a built-in MCP server for AI agents. See what's broken, why, and what changed. Issues, Topology, event timeline, Helm, GitOps, live service traffic, and cluster audits - all in one Go binary.

akira-init1 / ChannelTerm

Shared terminal sessions for humans and AI agents, starting with serial and hardware debugging.

hashicorp / vault

A tool for secrets management, encryption as a service, and privileged access management

zeromicro / go-zero

A cloud-native Go microservices framework with cli tool for productivity.

keploy / keploy

Open-source platform for creating safe, isolated production sandboxes for API, integration, and E2E testing.

googleapis / mcp-toolbox

MCP Toolbox for Databases is an open source MCP server for databases.

safing / portmaster

🏔 Love Freedom - ❌ Block Mass Surveillance

google / osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

nezhahq / nezha

:trollface: Self-hosted, lightweight server and website monitoring and O&M tool

johnkerl / miller

Miller is like awk, sed, cut, join, and sort for name-indexed data such as CSV, TSV, and tabular JSON

certimate-go / certimate

An open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually. 完全开源免费的自托管 SSL 证书 ACME 工具，申请、部署、续期、监控全流程自动化可视化，支持各大主流云厂商。

amacneil / dbmate

🚀 A lightweight, framework-agnostic database migration tool.

mvanhorn / cli-printing-press

Every API has a secret identity. This finds it, absorbs every feature from every competing tool, then builds the GOAT CLI — designed for AI agents first, with SQLite sync, offline search, and compound insight commands.

DingTalk-Real-AI / dingtalk-workspace-cli

DingTalk Workspace is an officially open-sourced cross-platform CLI tool from DingTalk. It unifies DingTalk’s full suite of product capabilities into a single package, is designed for both human users and AI agent scenarios.

betterleaks / betterleaks

Find leaked secrets everywhere.

jasonwong1991 / easy_proxies

A proxy node pool management tool based on sing-box, supporting multiple protocols, automatic failover and load balancing. 基于 sing-box 的代理节点池管理工具，支持多协议、多节点自动故障转移和负载均衡。

lerd-env / lerd

Open-source local PHP development environment for Linux, macOS and Windows (WSL2). Automatic .test domains, per-project PHP/Node isolation, one-command TLS. Podman-native, rootless.