ifixai-ai / iFixAi

Python CLI and agent plugin that audits whether an AI agent does the job it is supposed to do, using adversarial and operational tests.

danielmiessler / SecLists

A collection of security testing wordlists covering usernames, passwords, URLs, fuzzing payloads, web shells, and sensitive data patterns.

zero-lab-ai / skills

Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.

projectdiscovery / nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

perixtar / Tech-OA-Interview-Questions

Daily updated list of Tech Company OAs and Interview Problems. Save your time from finding them all over the internet.

edoardottt / awesome-hacker-search-engines

A curated Markdown list of search engines for security work, covering servers, vulnerabilities, exploits, leaks, and threat intelligence.

The-Art-of-Hacking / h4cker

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

MobSF / Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

cisagov / ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines

simonlin1212 / TradingAgents-astock

A股多Agent投研框架 — 适配A股数据源(龙虎榜/游资/解禁等)，7位分析师基于A股规则的辩论决策，基于TradingAgents深度改造，适配大A。A-share multi-agent investment research framework — 7 AI analysts, bull/bear debate, risk assessment。

yakhyo / uniface

UniFace: A Unified Face Analysis Library for Python | Detection, alignment, landmarks, face-mesh, recognition, parsing, gaze, attributes and anti-spoofing under one API.

itsreyi / BlockSuite

Minecraft server security assessment toolkit. Intercept, analyze, and test from a single desktop app.

NVIDIA / garak

the LLM vulnerability scanner

greenbone / openvas-scanner

This repository contains the scanner component for Greenbone Community Edition.

chaofengc / IQA-PyTorch

🔎 🖼️ 🔥PyTorch Toolbox for Image Quality Assessment, including PSNR, SSIM, LPIPS, FID, NIQE, NRQM(Ma), MUSIQ, TOPIQ, NIMA, DBCNN, BRISQUE, PI and more...

janreges / siteone-crawler

SiteOne Crawler is a cross-platform website crawler and analyzer for SEO, security, accessibility, and performance optimization—ideal for developers, DevOps, QA engineers, and consultants. Supports Windows, macOS, and Linux (x64 and arm64).

shuxiachai / academic-commercialization-agent

AI multi-agent tool that turns research papers into cited commercialization and tech-transfer assessments: TRL, patent landscape, market and risks. CrewAI + FastAPI, with a reproducible benchmark.

future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Netflix / vmaf

Perceptual video quality assessment based on multi-method fusion.

webpwnized / mutillidae

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

yashab-cyber / hackpilot

HackPilot Enterprise is a production-ready, cloud-native AI-powered penetration testing platform designed for enterprise security teams. It combines advanced AI, machine learning, microservices architecture, and comprehensive security frameworks to deliver professional-grade cybersecurity assessments.

dedsec1121fk / DedSec

Official repository of the DedSec Project.

ls1intum / Artemis

Artemis - Interactive Learning with Automated Feedback

PrairieLearn / PrairieLearn

Online problem-driven learning system

LINGYK352 / Watchtower

Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.

wheels344i-gte / ai-risk-map

A one-page reference for AI risk, built to widen the conversation before formal assessment. Organized by who owns the risk, with every factor traced to a source. Poster, workbook, CSV, and an AI-readable corpus. CC BY-SA 4.0.

MingyiSecLab / Atlas

Open-source local AI Agent desktop app for authorized security assessment — Electron + Mastra-powered runtime, visual pentest workflow, Kali sandbox, multi-provider LLM routing. 本地 AI 安全评估智能体桌面应用

Krishita17 / PhantomTap

A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads into a prioritized, explainable security assessment. Defensive-use only.

chipsec / chipsec

Platform Security Assessment Framework

cve-search / cve-search

cve-search - a tool to perform local searches for known vulnerabilities

Syslifters / sysreptor

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

fairlearn / fairlearn

A Python package to assess and improve fairness of machine learning models.

salesforce / cloudsplaining

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

microsoft / responsible-ai-toolbox

Responsible AI Toolbox is a suite of tools providing model and data exploration and assessment user interfaces and libraries that enable a better understanding of AI systems. These interfaces and libraries empower developers and stakeholders of AI systems to develop and monitor AI more responsibly, and take better data-driven actions.

chaofengc / Awesome-Image-Quality-Assessment

A comprehensive collection of IQA papers

silverhack / monkey365

Monkey365 is an open-source security assessment tool for Microsoft 365, Azure, and Microsoft Entra ID. It helps security professionals identify misconfigurations, review cloud security posture, and evaluate environments against industry security best practices and compliance standards.

berylliumsec / nebula

Cybersecurity Harness

pikpikcu / airecon

AIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual TUI. It is designed to automate security assessments, penetration testing, and bug bounty reconnaissance — without any API keys or cloud dependency.

reconmap / reconmap

Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and reporting. With built-in command automation, output parsing, and AI‑assisted summaries, it delivers faster, more structured, and high‑quality security assessments.

usnistgov / OSCAL

Open Security Controls Assessment Language (OSCAL)

cdxiaodong / cain-agent

Real-world AI penetration testing engineer for authorized assessments — built-in cloud module covering AWS/Azure/GCP + Aliyun/Tencent/Huawei clouds. Built on Claude Agent SDK

Azure / azqr

Azure Quick Review

MigoXLab / dingo

Dingo: A Comprehensive AI Data, Model and Application Quality Evaluation Tool

quant-sentiment-ai / claude-equity-research

🔌 Claude Code Plugin for institutional-grade equity research. Install with /plugin marketplace add. Generates professional buy/sell recommendations with comprehensive fundamental analysis, technical indicators, and risk assessment. Educational use only - not financial advice.

awslabs / aws-security-assessment-solution

An AWS tool to help you create a point in time assessment of your AWS account using Prowler.

tecnickcom / tcexam

TCExam is a CBA (Computer-Based Assessment) system (e-exam, CBT - Computer Based Testing) for universities, schools and companies, that enables educators and trainers to author, schedule, deliver, and report on surveys, quizzes, tests and exams.

factionsecurity / faction

Pen Test Report Generation and Assessment Collaboration

microsoft / ghqr

GitHub Quick Review: Evaluate your enterprise and organizations against GitHub best practices

ruoyuw22-byte / NeuroMorph-Assessment

An automated structural MRI morphometry system integrating CAT12 processing, brain tissue quantification, visualization, and automated report generation.

jiabaobei / skills-constitution

Skills Constitution — meta-rule governing all skill invocations across agent platforms

lantingzhang1119 / cohort-harbor

Self-hosted employee onboarding, policy learning, and assessment platform.

MaxCode917 / linkedin-skill-assessments-quizzes

—

Aji-Q / levelfield

Structural information-asymmetry risk for event contracts — Somnia × DreamDEX Event Contracts Hackathon

accomplish999 / position-sizer

Position size calculators for Perps and DeFi.

Genderstealer / psionic-mirror

Psionic VRIL Trainer 2026: Open-Source Psionic Assessment and Training Toolkit

leewayworks / guochuang-gps

GPS (Guochuang Preparation Skills) — A multi-agent AI toolkit for competition planning, proposal review, pitch deck optimization, defense coaching, and award-level assessment.

coolcat1870-tp0pz / assessment-alignment-checker

—

Jamonygr / az104-azure-administrator-labs

Command-first AZ-104 lab curriculum: 28 offline-validated labs with Azure CLI, PowerShell, Bicep, assessments, and safe cleanup

coolowl9143-tgo19 / student-assessment-feedback-loop

—

bbrepo / agentic-fraud-defense-framework

Open-source research prototype implementing an Agentic AI framework for real-time financial fraud detection, investigation, explainable risk assessment, and human-governed mitigation.