Security Tools

OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn

The Destructive Command Guard (dcg) is for blocking dangerous git and shell commands from being executed by agents.

DeepAudit: An AI hacker team for everyone, making vulnerability hunting within everyone's reach. Beginners can deploy and run it with one click, with autonomous collaborative auditing and automated sandboxed PoC verification. Supports Ollama private deployment and one-click report generation. Supports relay stations. Security no longer needs to be expensive, and auditing no longer needs to be complicated.

Connect your users to their apps

ShellCheck, a static analysis tool for shell scripts

Semgrep is an open-source static analysis (SAST) tool that finds bugs, security vulnerabilities and coding-standard violations using code-like patterns across 30+ languages.

Keycloak is an open-source identity and access management library and server for adding SSO, OIDC, SAML and authorization to applications and services.

OWASP Juice Shop is an intentionally insecure web application for security training, CTF challenges and testing security tools, covering the OWASP Top Ten.

authentik is an open-source identity provider for single sign-on, supporting SAML, OAuth2/OIDC, LDAP and RADIUS, for self-hosted setups from small labs to large clusters.

Vaultwarden is an unofficial, Bitwarden-compatible password manager server written in Rust, for self-hosted deployments with lower resource use.

Trivy is an open-source security scanner that finds vulnerabilities, misconfigurations, secrets and SBOMs in container images, filesystems, Git repositories and Kubernetes.

Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.

SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024]