promptfoo / promptfoo

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.

OWASP / cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

0sec-labs / 0

The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.

stijnswapped / Myrqen

Security testing that runs inside the coding agent you already use. Source-available, not open source.