ifixai-ai / iFixAi
Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less than 120 seconds.
CycloneSeamanQuicken / Adobe-Audition
Advanced Audio Workbench 2025 complete standalone setup. Secure digital asset deployment pipeline ready to run.
wangwanjie / gately
Open-source, auditable network gateway toolkit: DDNS, STUN traversal, port forwarding, reverse proxy, ACME certificates, WAF, Tailscale, frp in a single binary.
Aoisop / mawoagent
An auditable, reversible, evaluable local agent runtime that turns feedback into skills — and ships them only when evidence and tests say so.
xiaoyixuan0308-cyber / pawpath-shelter-management
Animal shelter & adoption management prototype — role-based workflows, rule-based listing, applicant ranking, audit trail.
eokahya / claude-audits-quantum-gravity
Claude re-derived a published one-loop quantum gravity calculation step by step: 18 tasks, 183 pages of derivations, 38 reproducible checks. It found a sign error and a missing term; the physical conclusion survived.
j1s4nn / jev-adaptive-granularity-WM
Official code, locked protocols, and audit artifacts for "Jev-Routed Temporal Granularity with Recovery and Hysteresis for Causal Video Generation": per-segment fine/coarse/hold routing for Causal-rCM (Wan2.1-1.3B) via the Jev oracle, with two-GPU (T4/A100) feasibility audits.
OSVerify / OSVerify
One-sided verification under limited expert review: audited review of solutions and papers (mathematics for now).
kamalx06 / TornadoC2
Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.
lisbeth718 / prod-check
Claude Code skill: audit your app before you take money from customers. 180 checks, 3 tiers, evidence-backed.
KeygraphHQ / shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
cloudflare / security-audit-skill
A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
GoogleChrome / lighthouse
Automated auditing, performance metrics, and best practices for the web.
every-app / open-seo
Open source alternative to Semrush and Ahrefs
gravitational / teleport
The easiest, and most secure way to access and protect all of your infrastructure.
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
cft0808 / edict
🏛️ 三省六部制 · OpenClaw Multi-Agent Orchestration System — 9 specialized AI agents with real-time dashboard, model config, and full audit trails
gojue / ecapture
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.
prowler-cloud / prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
future-architect / vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
cobusgreyling / loop-engineering
Practical patterns, starters & CLI tools for loop engineering with AI coding agents. Design systems that prompt and orchestrate agents (inspired by Addy Osmani and Boris Cherny). Includes loop-audit, loop-init, loop-cost.
google / osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
nicobailon / visual-explainer
Agent skill that generates rich HTML pages or slide decks for diagrams, diff reviews, plan audits, data tables, and project recaps
AgriciDaniel / claude-ads
Claude-first paid-media operations skill for Claude Code across 12 ad platforms (Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, X): source-grounded audits, deterministic findings and evidence coverage, versioned JSON reports, and capability-gated account changes.
toniblyx / my-arsenal-of-aws-security-tools
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
We5ter / Scanners-Box
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
codenotary / immudb
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
EvoMap / evolver
The GEP-powered self-evolving engine for AI agents. Auditable evolution with Genes, Capsules, and Events. | evomap.ai
v1s1t0r1sh3r3 / airgeddon
This is a multi-use bash script for Linux systems to audit wireless networks.
aircrack-ng / aircrack-ng
WiFi security auditing tools suite
dependency-check / DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
trailofbits / skills
Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
presidentbeef / brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
lintsinghua / DeepAudit
DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。
paper-trail-gem / paper_trail
Track changes to your rails models
open-multi-agent / open-multi-agent
Self-hosted TypeScript agent runtime with durable approvals and verifiable run records. Own it, approve it, audit it.
infobyte / faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
The-Z-Labs / linux-exploit-suggester
Linux privilege escalation auditing tool
glpi-project / glpi
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
rundeck / rundeck
Enable Self-Service Operations: Give specific users access to your existing tools, services, and scripts
Ryze-AI-Adgent / open-seo-mcp-skills
Free SEO MCP server + open-source SEO and GEO skills for Claude: keyword research, rank tracking, audits, backlinks, AI visibility on your real GSC/GA4/ads data. claude mcp add ryze --transport http https://connector.get-ryze.ai/mcp
spatie / laravel-activitylog
Log activity inside your Laravel app
next-terminal / next-terminal
A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.
iflytek / skillhub
Self-hosted, open-source agent skill registry for enterprises. Publish & version skill packages, govern with RBAC and audit logs, deploy on-premise with Docker or Kubernetes.
conorbronsdon / avoid-ai-writing
Skill that audits and rewrites content to remove AI writing patterns. Use it with your favorite agents including Claude Code, OpenClaw, Codex, and Hermes.
harlan-zw / unlighthouse
Run Google Lighthouse on your entire site.
HotCakeX / Harden-Windows-Security
Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨
initialcommit-com / git-sim
The visual layer for Git in your own repos: simulate, record, replay, audit, and share entire Git workflows, wherever you or your agents run them.
martin-olivier / airgorah
A WiFi security auditing software
intuitem / ciso-assistant-community
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
jtesta / ssh-audit
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Manavarya09 / design-extract
Extract any website's complete design system with one command. DTCG tokens, semantic+primitive+composite, MCP server for Claude Code/Cursor/Windsurf, multi-platform emitters (iOS SwiftUI, Android Compose, Flutter, WordPress), Tailwind v4, Figma variables, shadcn/ui, CSS health audit, WCAG remediation, Chrome extension. MIT, Playwright, Node 20+.
yvgude / lean-ctx
LeanCTX is the Context Gateway for AI Systems. Select task-relevant context, apply supported controls, connect local knowledge and inspect recorded evidence. Open-source Engine: CLI, MCP, hooks and supported proxy paths.
skyhook-io / radar
The missing open-source Kubernetes UI with a built-in MCP server for AI agents. See what's broken, why, and what changed. Issues, Topology, event timeline, Helm, GitOps, live service traffic, and cluster audits - all in one Go binary.
aquasecurity / cloudsploit
Cloud Security Posture Management (CSPM)
dembrandt / dembrandt
Extract any website’s design system into tokens in seconds: logo, colors, typography, borders & more. One command.
FairwindsOps / polaris
Validation of best practices in your Kubernetes clusters
codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
gwen001 / pentest-tools
A collection of custom security tools for quick needs.
the-tcpdump-group / tcpdump
the TCPdump network dissector