security

Local AI memory observability and security tool for inspecting, auditing, and rolling back what agents remember about you.

Grith is an OS-level security supervisor for AI coding agents on Linux. It intercepts syscalls, scores risky actions, pauses ambiguous ones for human review, and can deny dangerous calls before they run.

Open-source Go control-plane proxy for AI agents that enforces identity, policy, budgets, and audit for MCP and other upstreams, with anomaly detection that can auto-block compromised agents.

A local CLI for replaying what AI coding agents accessed on your machine, including file reads, secrets that entered context, and possible read-then-network-call exposure paths. It also scans exported ChatGPT, Claude, and Gemini histories for sensitive data.

Kernel-level read gate for AI coding agents that blocks protected file reads before bytes reach the agent, with Linux fanotify and macOS Endpoint Security support.

An AI API gateway/proxy in Go that sits between coding clients and upstream LLM providers, with request routing, secret redaction, context handling, MCP tool integration, and transparent SSE streaming.

A TypeScript static scanner that finds AI agent tool calls with no checks before they can trigger real-world side effects. It supports CLI scanning, JSON output, a generated tool-call registry, and CI/pre-commit enforcement.

Local guardrails for AI coding agents that intercept destructive actions before they execute, now extended to Git hooks for commit and push enforcement.

A zero-config CLI that scans repositories for AI-slop patterns like missing .env.example files, committed secrets, large files, duplicated code, TODO drift, and missing tests, then returns a Vibe Score from 0 to 100.

Beacon is an open-source endpoint telemetry layer for local AI agents. It captures supported activity from tools like Claude Code, Codex CLI, Gemini CLI, OpenCode, Factory Droid, Claude Cowork, and Cursor, then normalizes events for local inspection or forwarding to SIEM pipelines.

Open-source security guidance for specific libraries and versions, aimed at developers and coding agents. The repo includes local setup steps, a web site, and an installable skill for agent workflows.

Open-source endpoint visibility and response for AI agents, with local detection, optional pre-action blocking, and forensic reconstruction.

Local-first MCP gateway that lets multiple AI clients share one server setup, with lazy tool discovery to reduce token usage and built-in tool integrity and quarantine controls.

Exfault is an autonomous Android security testing tool that uses AI agents, static analysis, dynamic analysis, authenticated workflows, and cloud emulators to produce reproducible findings and reports.

A honeypot telemetry and threat intelligence service with searchable IP lookups, recent scanner data, and an MCP/JSON-RPC API for agents and developers.

A command-line tool that sends fake RFC 3464 bounce messages to make spam senders think an address does not exist. The README explains the workflow, configuration, batch mode, multiple-account handling, and provider-specific caveats.

Weir is a CI gate for AI agents that reads OpenTelemetry traces and fails builds when sensitive data reaches forbidden sinks. It includes a gauge for trace coverage, taint tracking, HTML reports, and rule-based scans for agent workflows.

CLI and GitHub Action that scans repos, logs, and CI artifacts for leaked LLM reasoning-trace blocks from Anthropic, OpenAI, and Google.

Kotro is a local control plane for coding agents that governs MCP tool actions and LLM traffic with one binary. The page shows install options, supported clients, dashboard access, and concrete controls like schema pinning, redaction, cache, budget, and circuit breaker behavior.

An open-source agent-driven package manager for versioned, checksummed, approval-gated tasks run through Claude Code, Codex, Gemini CLI, OpenCode, or Antigravity.

Hotcell is a self-hostable sandbox SDK for AI agents that runs isolated sandboxes on local hardware or servers. The page shows setup, CLI commands, key handling, egress control, and support for containers or microVMs.

A local Rust-plus-Python middleware layer for LLM apps that claims to reduce token usage and add in-process security checks before prompts are sent to a provider.

A loopback HTTPS proxy that swaps placeholders for real API keys at request time, keeping secrets out of the agent process. It uses Bitwarden Secrets Manager and supports scoped bindings for hosts, methods, and paths.

Runtime authorization platform for AI agents with open-source SDKs in Python, TypeScript, Go, Java, and Rust. The page says the hosted service is in production, supports per-action checks, scoped delegation, revocable tokens, and a shared authorization model across MCP tools, agent-to-agent calls, and direct API integr