busabase / busabase
Open-source database & workspace for AI agents — structured data, durable knowledge, reusable skills, runnable apps, and human review on the writes that matter. Local-first and self-hostable.
busabase / busabase
ceyyy427 / finathink
Finathink — Financial Research Optimizer for auditable, point-in-time research, mathematical learning, and constrained portfolio analysis.
nexscope-ai / ecommerce-ai-tools
Open ecommerce AI tools and guides for Amazon review analysis, listing optimization, keyword research, SEO audits, AI image/video generation, and APIs for AI agents.
vstorm-co / agenticos
Open-source AI teammates for your company. The self-hosted agent layer: build, run and govern AI agents on your own servers, models and rules. RAG, skills, a real browser, 4,700+ MCP servers and an API, with budgets, approvals and an audit trail. Apache-2.0, built on Pydantic AI.
bitcloud-ai / Bittune
Local-first engineering agent that deploys, benchmarks and tunes vLLM/SGLang inference services on your own GPUs, with auditable run evidence.
prowler-cloud / prowler
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
We5ter / Scanners-Box
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
open-multi-agent / open-multi-agent
Self-hosted TypeScript agent runtime with durable approvals and verifiable run records. Own it, approve it, audit it.
The-Z-Labs / linux-exploit-suggester
Linux privilege escalation auditing tool
HotCakeX / Harden-Windows-Security
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨
intuitem / ciso-assistant-community
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
jtesta / ssh-audit
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
erupts / erupt
Code as configuration. Annotate a Java entity with @Erupt and ship a production-grade admin backend in minutes — UI, RBAC, audit logs and APIs, all generated at runtime. No codegen, no frontend.
0xSteph / pentest-ai-agents
Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.
ovh / the-bastion
Authentication, authorization, traceability and auditability for SSH accesses.
AMAP-ML / LongHorizon-Harness
The long-horizon computer-use harness. Run AI agents across desktop apps and the CLI for extended periods while preserving task state and making reliable progress on complex workflows. Features fresh-context execution, durable verified state, independent auditing, recoverable progress, and native Claude Code / Codex / OpenClaw integration.
DataTalksClub / ai-dev-tools-zoomcamp
A free, hands-on course on using AI developer tools to build, test, deploy, extend, and audit software without losing engineering discipline. The 2026 cohort starts August 31.
lakekeeper / lakekeeper
Apache Iceberg REST Catalog in Rust — access control, credential vending and audit for every engine and AI agent. Apache 2.0.
meridianlabs-ai / inspect_petri
An alignment auditing agent capable of quickly exploring alignment hypothesis
pashov / audits
—
vigolium / vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
DataDog / KubeHound
Tool for building Kubernetes attack paths
xiaotianfotos / homerail
Voice-first local agent orchestration runtime for auditable DAG workflows.
thedivergentai / Game-Dev-Agentic-Skills
Multi-engine long-term memory for game AI agents. Deep Godot 4.7+ (99 skills, 27 genre blueprints) + Bevy docs-first parity — audited patterns, persona orchestration (Analyst · Auditor · Builder), production-grade engineering.
wagga40 / Zircolite
A standalone SIGMA-based detection tool for EVTX, Auditd and Sysmon for Linux logs
StJudeWasHere / seonaut
Open source SEO audit tool.
crawlseo / crawlseo
Open-source SEO monitoring. GSC + Site Crawler + Core Web Vitals in one dashboard.
tlsfuzzer / tlsfuzzer
SSL and TLS protocol test suite and fuzzer
oliver-kriska / claude-elixir-phoenix
Claude Code plugin for Elixir/Phoenix/LiveView — 26 specialist agents, Iron Laws enforcement, and Tidewave MCP integration. Plan features with parallel research agents, execute with automatic verification, review with 4-agent parallel audits, and capture learnings as reusable knowledge.
Illyism / seo-skills
SEO skills for Claude Code, Cursor and Codex: SEO autopilot, title tags, blog refreshes, backlinks, customer journeys, video transcripts and copywriting.
fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
waybarrios / opencode-power-pack
54 rigorous skills for Codex, OpenCode, and Pi: code review, security audit, feature development, frontend design, MCP tools, Hugging Face ML/training, and more.
damonwan1 / AutoScholarLoop
A multi-agent AUTO Research loop for idea discovery, experiment execution, evidence-grounded paper writing, quality audit, and live Web observation from AI group, CNIC, CAS.
adshao / flounder
Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.
Justin0504 / Aegis
Runtime policy enforcement for AI agents. Cryptographic audit trail, human-in-the-loop approvals, kill switch. Zero code changes.
shinthink / blitzstrike
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
Claycui828 / ASu-resume-skills
阿酥式高密度技术履历生成与证据优先简历审计
robonuggets / doctor-plus
Extended health check for Claude Code - runs /doctor, then audits your workspace against Anthropic's 6 then & now context-engineering shifts
slywalker2006 / dsh-passwords
Server-grade gateway that turns DeepSeek Harness into a multi-tenant platform: remote access + auto HTTPS, subuser permissions & quotas, sandbox enforcement, encrypted auth, audit log.
vanyu0710 / Varen-AI-CAD
AI CAD 建模 Agent：一句话需求进来，调研、提问、出 BOM，逐件完成真实 CAD 建模并导出装配 STEP（参数化 BRep，不是图片或网格）；几何与碰撞检查不过关就不交付。Windows 封闭 Beta。An AI CAD modeling agent: real parametric geometry from a one-line brief, gated by geometry and interference checks.
Chloe-MIAOmiao / Sales-Agent
An enterprise-grade AI Agent platform designed to streamline sales quality assurance, enforce compliance auditing, and automate high-converting follow-up workflows for EdTech and high-ticket service teams. By analyzing unstructured sales conversation logs, the system bridges the gap between risk management and sales enablement.
angusdevgo / Seep-Tool
CWE-602 客户端鉴权脆弱性白盒审计方法论与纵深防御加固研究框架
ZhangRui987 / agent-oversight-framework
AI 执行与监察体系（Agent Oversight Framework）：分层治理规范 + L2 运行时监察参照实现——证据分级、自校正、边界诚实。A layered governance spec for AI agents, plus a runnable reference implementation of the L2 runtime-oversight layer. Docs CC BY-SA 4.0 / code Apache-2.0.
cporter202 / seo-apis-that-rank-pages
This GitHub repo is a powerhouse collection of SEO APIs you can start using immediately to research keywords, audit pages, and climb rankings. One of the most valuable SEO API lists on GitHub.
Carlos-Dominguez-faber / claude-code-tune-kit
Deja de usar Claude Code como venía en la caja. Semáforo de contexto, modo conciso, 4 hooks que bloquean comandos destructivos y secretos, estilo de salida sin humo, GLM sin secuestrar tu config — y cc-doctor.sh, que audita tu instalación y te dice qué te falta.
nithin42 / Foundry-Toolbox-Radar-Lab
Pre-deployment governance, identity auditing, and data-leakage scanner for Microsoft Foundry Toolboxes and autonomous AI agents.
lupingQAQ / JGD
Autonomous agent that mines Java deserialization gadget chains from any JAR directory. Static bytecode analysis + dynamic JVM probes + dual-model adversarial auditing → weaponized PoC. Solving the last mile.
Krishita17 / PhantomTap
A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads into a prioritized, explainable security assessment. Defensive-use only.
toniblyx / my-arsenal-of-aws-security-tools
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
codenotary / immudb
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
paper-trail-gem / paper_trail
Track changes to your rails models
infobyte / faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
glpi-project / glpi
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
rundeck / rundeck
Enable Self-Service Operations: Give specific users access to your existing tools, services, and scripts
spatie / laravel-activitylog
Log activity inside your Laravel app
iflytek / skillhub
Self-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and audit logs, deploy on-premise with Docker or Kubernetes.
harlan-zw / unlighthouse
Run Google Lighthouse on your entire site.
initialcommit-com / git-sim
The visual layer for Git in your own repos: simulate, record, replay, audit, and share entire Git workflows, wherever you or your agents run them.