anthropics / claude-code

Agentic coding tool that runs in your terminal, reads your codebase, and executes coding and git tasks from natural language commands.

LibreChat-AI / LibreChat

Enhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Responses API, Azure, Groq, o1, GPT-5, Mistral, OpenRouter, Vertex AI, Gemini, Artifacts, AI model switching, message search, Code Interpreter, langchain, DALL-E-3, OpenAPI Actions, Functions, Secure Multi-User Auth, Presets, open-source for self-hosting. Active

KeygraphHQ / shannon

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

reactive-resume / reactive-resume

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

aipoch / open-science

The open-source AI research workbench for scientific research and agent workflows. Local-first, model-agnostic desktop app with extensible skills, MCP tools and connectors, Python/R execution and traceable artifacts for reproducible research on macOS, Windows and Linux.

PDFCraftTool / pdfcraft

PDFCraft is a free, privacy-focused PDF toolkit that runs entirely in your browser. With 90+ professional tools, you can edit, convert, merge, split, and secure your PDF files without ever uploading them to a server.

kenryu42 / cc-safety-net

A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.

Yeachan-Heo / oh-my-claudecode

Teams-first Multi-agent orchestration for Claude Code

mattermost / mattermost

Mattermost is an open source platform for secure collaboration across the entire software development lifecycle..

NVIDIA / NemoClaw

Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference

openai / codex-security

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

fosrl / pangolin

Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.

reconurge / flowsint

A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.

vercel-labs / deepsec

Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents

liguobao / ds-harness-remote

一个基于 DeepSeek Harness 插件机制构建的多端远程访问方案，通过安全、低延迟、端到端加密的 P2P 优先网络，支持从 PC、Android 和 Web 随时访问并操作远程 Harness 和 CodeX。 (A multi-device remote access solution built on the DeepSeek Harness plugin system, enabling PC, Android, and Web clients to securely access and operate remote Harness and CodeX over a low-latency, end-to-end encrypted, P2P-first network.)

RocketChat / Rocket.Chat

The Secure CommsOS™ for mission-critical operations

juice-shop / juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

tintinweb / pi-subagents

Claude Code like Sub-Agents & Workflow Orchestration for Pi — parallel execution, live widget, fleet view, custom agent types, mid-run steering, claude compatible dynamic workflows and more ...

Infisical / infisical

Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.

UsefulSoftwareCo / executor

The missing integration layer for AI agents. Let them call any OpenAPI / MCP / GraphQL / custom js functions in secure environment.

akdeb / ElatoAI

Realtime Voice AI with 100+ Models on Arduino ESP32 with Secure Websockets and Edge Functions for AI Companions, and Devices

BitMiracle-AI / Dormice

The SQLite of agent sandboxes — self-hosted, E2B-compatible. One machine, sandboxes that live forever, idle costs nothing.

lissy93 / web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

jitsi / jitsi-meet

Jitsi Meet - Secure, Simple and Scalable Video Conferences that you use as a standalone app or embed in your web application.

lissy93 / personal-security-checklist

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026

tutao / tutanota

Tuta is an email service with a strong focus on security and privacy that lets you encrypt emails, contacts and calendar entries on all your devices.

tech-leads-club / agent-skills

The secure, validated skill registry for professional AI coding agents. Extend Antigravity, Claude Code, Cursor, Copilot and more with absolute confidence.

CyberStrikeus / CyberStrike

Open-source AI-powered offensive security harness for automated penetration testing.

altcha-org / altcha

GDPR, WCAG 2.2 AA, and EAA compliant, self-hosted CAPTCHA alternative with PoW mechanism.

affaan-m / agentshield

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

step-security / harden-runner

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

rome-os / rome

A compounding agent OS for recursive agents. Also an open source alternative to Grok Bot and Meta's Muse.

seo-skills / seo-audit-skill

A comprehensive SEO audit command-line tool with 332 audit rules across 20 categories. Analyze any website for SEO best practices, Core Web Vitals, security headers, structured data, accessibility, and more.

mountain-loop / yaak

The most intuitive desktop API client. Organize and execute REST, GraphQL, WebSockets, Server Sent Events, and gRPC 🦬

privatenumber / tsx

⚡️ TypeScript Execute | The easiest way to run TypeScript in Node.js

OpenCTI-Platform / opencti

Open Cyber Threat Intelligence Platform

yaklang / yakit

Cyber Security ALL-IN-ONE Platform

miantiao-me / Sink

⚡ A Simple, Speedy, Secure, and Serverless Link Shortener with Analytics, Running Entirely on Cloudflare.

generalaction / emdash

Emdash is the Open-Source Agentic Development Environment (🧡 YC W26). Run multiple coding agents in parallel. Use any provider.

next-terminal / next-terminal

A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.

codeaashu / claude-code

Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

vercel / workflow

Workflow SDK: Build durable, reliable, and observable apps and AI Agents in TypeScript

potatameister / PaperKnife

Privacy-first PDF utility (Zero-Server Architecture). Merge, split, compress, and edit PDFs 100% locally on your device. No uploads, no servers, no tracking.

s0ld13rr / pentestcode

PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.

scanaislop / aislop

Catch and fix the code-quality issues AI coding agents leave behind - dead code, unsafe casts, swallowed errors, duplication, security risks, and more. 50+ deterministic rules across 10 language targets, with CLI, CI, and GitHub Actions. No LLM at runtime. MIT.

sun168567 / cc-desk-tunnel

用桌面客户端驱动云端的 Claude Code，经反向隧道在 Windows 本机执行 · Desktop client for Claude Code in the cloud, executing on your Windows PC through a reverse tunnel

rohingosling / automata-lab

Generate, edit, test, and execute Finite State Machines.

helmetjs / helmet

Help secure Express apps with various HTTP headers

berty / berty

Berty is a secure peer-to-peer messaging app that works with or without internet access, cellular data or trust in the network

purocean / yn

A highly extensible Markdown editor featuring version control, AI Copilot, document annotations, mind maps, document encryption, executable code snippets, chart embedding, HTML applets, plugins, and macro replacement. Its integrated sidebar terminal makes working with AI faster and more convenient.

standardnotes / app

Think fearlessly with end-to-end encrypted notes and files. For issues, visit https://standardnotes.com/forum or https://standardnotes.com/help.

scriptscat / scriptcat

ScriptCat, a browser extension that can execute userscript; 脚本猫，一个可以执行用户脚本的浏览器扩展

darrenhinde / OpenAgentsControl

AI agent framework for plan-first development workflows with approval-based execution. Multi-language support (TypeScript, Python, Go, Rust) with automatic testing, code review, and validation built for OpenCode

AdventDevInc / kudu

Free Windows, Mac and Linux cleaner, scanner, and more.

code-yeongyu / lazycodex

The one and only agent harness for complex codebases. Project memory, planning, execution, and verified completion inside Codex.

onecli / onecli

Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent.

dorny / paths-filter

Conditionally run actions based on files modified by PR, feature branch or pushed commits

coddingtonbear / obsidian-local-rest-api

A secure REST API and Model Context Protocol (MCP) server for your vault.

flick9000 / winscript

Open-source tool to build your Windows script from scratch. It includes debloat, privacy, performance & app installing scripts.

voidauth / voidauth

Single Sign-On for Your Self-Hosted Universe