dev-tools
Drop: a rootless Linux sandbox for AI coding agents
Drop gives AI coding agents their own Linux namespace, hiding your SSH keys and blocking localhost access. Here is how to install and run it.
#sandbox#linux#security
Tag
Security Posts
72 posts tagged #security
Browse 72 posts tagged Security. Setup notes, reviews, comparisons, and workflow patterns.
All Posts
dev-tools
Reverse-Skill: AI Skill Pack for Security Research
Reverse-Skill is an MIT-licensed PowerShell skill router pack for AI coding clients. Covers reverse engineering, authorized penetration testing, and security research at 38K stars.
#github-trending#dev-tools#security
self-hosted
OpenBao: Secret Management for Self-Hosted Teams
OpenBao is an MPL-2.0 Go project forked from a popular secrets manager. Self-host secrets, certificates, and keys across infrastructure with 8K stars.
#github-trending#self-hosted#go
dev-tools
Cloudflare's Security Audit Skill for Coding Agents
Cloudflare's open-source skill runs multi-phase security audits against code via coding agents, emitting machine-verified findings. MIT, JavaScript, 7.3k stars.
#github-trending#dev-tools#security
dev-tools
Ghidra: NSA's Open-Source Reverse Engineering Framework
Ghidra is the NSA's open-source software reverse engineering framework. Java-based, Apache-2.0, with disassembler, decompiler, and analysis tooling used by malware analysts and security researchers.
#github-trending#dev-tools#java
dev-tools
pentagi: Autonomous AI Agents for Penetration Testing
Self-hosted multi-agent AI system built in Go that autonomously performs complex penetration testing tasks using Anthropic and OpenAI models.
#github-trending#security#ai-agents
dev-tools
xhr.dev - Self-hosted anti-bot solver
Run a Docker container inside your own network to solve Datadome and Akamai Bot Manager challenges. Flat fee, no per-request billing, works air-gapped.
#dev-tools#self-hosted#security
dev-tools
Defencecore - Free Supabase Security Scanner
A free, read-only tool that finds unsafe RLS policies, exposed tables, and public Storage buckets in your Supabase project via OAuth.
#security#supabase#dev-tools
dev-tools
Escape – AI-Powered Offensive Security for APIs and Web Apps
Replace legacy scanners with AI agents that discover, test, and remediate security vulnerabilities across your API attack surface continuously.
#security#api#dev-tools
self-hosted
Flashpaper – Zero-Knowledge Ephemeral Secret Sharing
Open-source ephemeral secret sharing tool. Client-side AES-256-GCM encryption, RAM-only storage, one-time read. Free for individuals.
#self-hosted#security#dev-tools
dev-tools
Nix – Zero-Knowledge Secret Sharing
Nix is an open-source web tool that encrypts text or files in your browser and generates one-time viewable links. No account needed, zero server-side knowledge of your data.
#dev-tools#self-hosted#security
dev-tools
HoneyLabs – Public Honeypot Telemetry with MCP and HTTP API
HoneyLabs runs open-source honeypot sensors on the public internet and serves 90 days of searchable attack telemetry — TLS fingerprints, raw payloads, CVE matches — over HTTP and an MCP server.
#dev-tools#self-hosted#security
dev-tools
DepsGuard – Hardening Package Manager Configs Against
DepsGuard is a Rust-based CLI tool that scans NPM, pnpm, yarn, bun, uv, pip, poetry, and aube configs for supply chain vulnerabilities and applies fixes interactively. Single binary, no runtime deps.
#security#dev-tools#rust
dev-tools
KeyEnv - CLI-First Secrets Management for Dev Teams
Stop sharing .env files over Slack. KeyEnv encrypts secrets, audits access, and gives teams a CLI-first workflow with role-based access control.
#dev-tools#security
dev-tools
Oneleet - Penetration Testing for SOC 2
Oneleet is an all-in-one compliance platform combining real-world penetration testing with SOC 2, ISO 27001, HIPAA, and GDPR certification workflows.
#dev-tools#security#compliance
dev-tools
ContextFort – Monitor What AI Coding Agents Access on Your
ContextFort gives engineering teams visibility into AI coding agents like Cursor and Claude Code: every file touched, network connection, and process spawned.
#dev-tools#ai-setup#security
ai-setup
cMCP - Confidential MCP Runtime with Hardware Attestation
cMCP is an open-source gateway that enforces MCP tool-call policy inside a Trusted Execution Environment, with signed TRACE claims for auditability.
#ai-setup#security#open-source
dev-tools
MCPS – Cryptographic Identity and Message Signing for MCP
MCPS adds ECDSA P-256 + SHA-256 signing, replay protection, and tool integrity verification to the Model Context Protocol. Drop-in secure replacement for the MCP SDK.
#mcp#security#cryptography
ai-setup
Permit.io MCP Gateway – Fine-Grained Authorization for AI
The drop-in trust layer for MCP — authentication, fine-grained authorization, consent, and audit for AI agents. Zero standing permissions. Enterprise-grade security.
#mcp#ai-setup#security
self-hosted
Let's Seal – Let's Encrypt for Document Signing, Free and
Let's Seal is an open standard and free tool for proving any file is real, unaltered, and sealed. Supports PDF, images, email, XML, and any file. Self-hosted option available.
#self-hosted#document-signing#open-source
self-hosted
OpenEdison - MCP Gateway for Agent Data Security
Open-source MCP gateway that monitors and blocks data leaks by AI agents. Tracks the lethal trifecta: private data access, untrusted content, and external writes.
#mcp#security#ai-agents
dev-tools
Caido - Lightweight Web Security Auditing Toolkit
A fast, headless web security proxy with AI analysis, HTTPQL filtering, and team collaboration for bug bounty hunters and pentesters.
#security#web-security#pentesting
ai-setup
AgentPort - Open-Source Security Gateway for AI Agents
AgentPort lets you connect AI agents to Stripe, GitHub, Gmail and 50+ services with approval policies, full audit logs, and zero credential exposure.
#ai-agents#security#mcp
ai-setup
Sentinel – Zero-Trust Governance for AI Agent Tool Calls
Intercept, approve, and audit every LLM tool call with one Python decorator. Fail-secure by default.
#ai-setup#security#python
dev-tools
Bucket – Encrypted File Sharing From the Terminal
Push files from your terminal, get a link with a secret. Bucket sends large files without the usual friction — no browser, no sign-ups, no attachments rotting in inboxes.
#cli#dev-tools#security
dev-tools
DataParade – Generate Dataflow Diagrams from Code
DataParade CLI scans your codebase and outputs a JSON dataflow graph showing how data moves between files — useful for privacy reviews, security audits, and compliance documentation.
#security#dev-tools#open-source
ai-setup
Vett – Scan and Sign AI Agent Skills Before Running
Vett is an open-source CLI and hosted platform that scans AI agent skills for malicious code, signs verified ones, and runs each agent in an isolated Firecracker microVM.
#ai-agent#security#mcp
ai-setup
Cupcake – Policy Enforcement for AI Coding Agents
A native policy enforcement layer for AI coding agents that intercepts actions and evaluates them against OPA/Rego policies, blocking unsafe operations before they execute.
#ai-setup#dev-tools#security
ai-setup
LLMtary - Local LLM-Powered Penetration Testing
Run autonomous penetration tests with local LLMs. LLMtary chains recon, exploitation, and reporting—Ollama, Claude, GPT-4, and Gemini supported.
#pentesting#security#local-llm
ai-setup
Kontext CLI – Authorization Platform for AI Agents
Secure credential injection, policy enforcement, and audit trails for AI coding agents. Open-source Go CLI with Homebrew install, MIT licensed.
#ai-setup#dev-tools#security
ai-setup
Driftcop - Open-Source MCP Security Scanner
Driftcop detects drift, injection attacks, and CVEs in MCP servers with SigStore tracking — the SAST tool your AI agents need.
#mcp#security#saast
self-hosted
PenPeeper - Open Source Pentesting Engagement Manager
PenPeeper is a free, open-source pentesting engagement manager that combines AI-powered vulnerability analysis with Nmap, Nikto, and FFUF scanning, CVE lookup, and professional report generation.
#pentesting#security#open-source
dev-tools
DepsGuard - Supply Chain Security CLI Tool
DepsGuard is a zero-dependency Rust CLI that scans your npm, pnpm, yarn, bun, uv, pip, and poetry configs for supply chain security gaps and applies fixes interactively.
#security#cli#rust
ai-setup
Nono - Kernel-Level Sandboxing for AI Agents
Run any AI agent in a zero-latency kernel-enforced sandbox with zero setup. Nono isolates agents and their tools with least-privilege policies, credential proxying, and L7 API filtering.
#ai-setup#security#self-hosted
dev-tools
OneCLI – Vault for AI Agents in Rust
Open-source gateway that stores API credentials once and injects them transparently for AI agents. Never give agents your real keys.
#ai-agents#security#rust
ai-setup
ScopeGate – MCP Permission Gateway for AI Agents
ScopeGate is an open-source MCP proxy that gives each AI agent exactly the access it needs — nothing more. Connect Google services, define granular OAuth scopes, and get an MCP endpoint URL in
#mcp#ai-agent#security
ai-setup
Cordon MCP Security Gateway - Policy Engine for AI Agents
Cordon is an open-source security gateway that sits between AI agents and MCP servers, enforcing policy-based access control with human-in-the-loop approvals.
#mcp#security#ai-agents
ai-setup
Tansive – Policy-Driven AI Agent Platform
Open-source platform for securing AI agents with fine-grained policies, runtime enforcement, and tamper-evident audit logs. Apache-2.0.
#ai-setup#self-hosted#security
dev-tools
VibeShield — Turn Intent into Architecture
VibeShield transforms developer intent into secure, production-ready code via a real-time security mediation layer that converts natural language requests into precise engineering specs with built-in
#dev-tools#security#ai
review
Exfault – AI-Powered Android App Pentesting
Exfault is an autonomous mobile security researcher for Android apps, using AI agents, static analysis, dynamic analysis, authenticated workflows, and real Android cloud emulators to produce
#security#ai-tools#mobile
ai-setup
owthorize – Block Destructive AI Agent Tool Calls Before
owthorize is a synchronous Node.js guard that parses SQL, HTTP, shell, and filesystem tool calls into typed shapes and evaluates them against rules — catching destructive AI agent actions before they
#ai-agent#security#nodejs
dev-tools
certgrep - Search Certificate Transparency Logs
certgrep is a free tool that searches Certificate Transparency logs to find domain squatting and phishing attempts against your brand, built by the Have I Been Squatted team.
#security#dns#dev-tools
ai-setup
Viberails - Open-Source AI Agent Guardrail Tool
Intercept, audit, and validate AI agent tool calls before execution. Viberails adds a security layer between AI agents and their operations with under 50ms latency.
#ai-setup#dev-tools#security
dev-tools
CloudGrip - Code Governance for AI Agents
CloudGrip connects GitHub, GitLab, and Slack with a code review agent and Cerberus vulnerability scans to govern AI-generated code before it reaches production.
#ai-setup#dev-tools#security
self-hosted
Octelium – FOSS Zero Trust Access Platform (ZTNA, VPN,
Octelium is a self-hosted, open-source unified zero trust platform combining VPN, ZTNA, secure tunnels, AI gateway, and MCP gateway in one install.
#self-hosted#security#networking
ai-setup
AgentLair – AI Agent Identity, Email, and Credential Vault
AgentLair gives AI agents a persistent email identity, encrypted credential storage, and namespace isolation via a single API — no OAuth, no human in the loop.
#ai-agent#security#developer-tools
dev-tools
ArgusRed – Security Scan and Pen Test CLI
Post-trained AI pen testing tool that actually runs exploits against your own infrastructure, backed by 2M free tokens on signup.
#security#ai-tools#cli
dev-tools
Vet – MCP Server Security Registry
Before installing an MCP server, check its trust score, permission map, and security report. Vet maintains a free registry of 136K+ AI tools and MCP servers.
#mcp#security#cli
self-hosted
nano – Lightweight SIEM Built in Rust with ClickHouse
Self-hosted security SIEM that runs on 2 vCPU and 4 GB RAM. Sub-second search across billions of events, AI-assisted triage, and a managed cluster on every plan.
#self-hosted#security#siem
ai-setup
Rigour – Open-Source Quality Gates for AI Coding Agents
Rigour is an open-source governance layer for AI coding agents that scans for secrets, enforces code quality, and controls agent memory in real time.
#ai-setup#dev-tools#security
dev-tools
Infisical – Open-Source Secret Management Platform
Infisical is an open-source platform for syncing secrets, certs, and environment variables across your team and infrastructure. Self-host or use cloud.
#dev-tools#security#self-hosted
dev-tools
APIRadar – Real-Time API Key Exposure Scanner
APIRadar monitors millions of public GitHub repositories in real time, surfacing exposed API keys for OpenAI, Claude, Gemini and other providers before they get weaponized.
#security#github#api-keys
dev-tools
EnvMark – Git-Based .env Management
EnvMark uses Git as a backend to manage and share .env files across teams. No server, no third-party storage—just Git branches for environment isolation.
#dev-tools#git#environment
ai-setup
SigmaShake - AI Agent Guardrails at Runtime
SigmaShake adds deterministic sub-2ms guardrails to Claude Code, Cursor, Gemini CLI, and Copilot - blocking destructive tool calls before they execute.
#ai-setup#dev-tools#security
ai-setup
plyra-guard – AI Agent Action Middleware
Production-grade middleware that intercepts AI agent tool calls, evaluates them against policy, and blocks or logs risky actions before execution.
#ai-setup#dev-tools#ai-agent
ai-setup
Reality Defender - Deepfake Detection API
Reality Defender API detects AI-generated deepfakes in images, audio, and video. Enterprise-grade verification for platforms and institutions.
#ai-setup#security#api
dev-tools
Kexa.io - Open-Source IT Security and Compliance Scanner
Open-source multi-cloud security and compliance verification tool. Monitors AWS, Azure, GCP, and OCI with instant alerting and low infrastructure overhead.
#security#compliance#open-source
dev-tools
API Radar – Real-Time GitHub Scanner for Exposed API Keys
Live tracking of exposed API keys from millions of GitHub repositories. Analyze exposure trends to mitigate organizational security risks with unmatched detail and speed.
#dev-tools#security#github
ai-setup
Capframe – Capability Security for AI Agents
Capframe maps every tool your AI agents reach, mints scoped capability tokens in Rust, and enforces runtime policy decisions in microseconds—no LLM in the path.
#ai-agent#security#mcp
ai-setup
EnforceAuth – Authorization for the AI Agent Era
Policy-as-code authorization built for AI agents, with OPA-native design, AuthZEN alignment, and agent-operable access workflows through MCP integration.
#ai-setup#dev-tools#security
dev-tools
agentcookie - Sync Browser Sessions to Agent Macs
agentcookie syncs Chrome cookies, CLI bearer tokens, and API keys between Macs over Tailscale so agent machines stay authenticated without repeated logins.
#ai-agents#macos#tailscale
dev-tools
AccessOwl - SaaS Access Governance and Shadow IT Detection
AccessOwl is a YC-backed SaaS management platform that provides access governance, Shadow IT detection, and automated user provisioning for Google Workspace and Microsoft 365 environments.
#saas-management#security#access-governance
dev-tools
SuperHQ - Run AI Coding Agents in Isolated Sandboxes
SuperHQ runs Claude Code, Codex, and custom AI agents in isolated microVMs on macOS. Each agent gets its own sandbox with secure auth gateway and diff review.
#ai-agents#dev-tools#sandbox
dev-tools
VaultSQL - Zero-Trust SQL Workbench for Teams
Open-source SQL workbench with end-to-end encrypted credentials, access requests, and audit logs. Free hosted or self-hosted deployment for secure database access.
#sql#database#security
ai-setup
PrivateClaw – AI Agents in Confidential VMs with TEEs
Run AI agents in hardware-encrypted TEEs backed by AMD SEV-SNP. Private inference, vTPM-bound keys, and TEE-attested execution for OpenClaw workloads.
#ai-agents#security#tee
dev-tools
Infisical - Open-Source Secret Management Platform
Infisical is an open-source identity security platform for developers, machines, and AI agents. Manage secrets, certificates, and access with self-hosted or cloud deployment.
#secret-management#devops#open-source
dev-tools
Enact - Verified AI Tools Registry
Browse, discover, and safely run AI tools with cryptographic verification. Enact is the npm for AI agents—a registry with end-to-end proofs that tools do.
#ai-agent#tool-registry#developer-tools
dev-tools
Jibril - Runtime Security Monitoring for Cloud-Native Infra
Jibril uses eBPF to monitor and enforce runtime security policies directly in the Linux kernel — deploy a single binary with negligible overhead and real-time.
#security#devops#ebpf
dev-tools
Reality Defender - Deepfake Detection API for Developers
Reality Defender launches a public API for real-time multimodal deepfake detection across images, voice, video, and text — with SDKs in Python, Java, Rust.
#deepfake#api#security
dev-tools
Didit – Unified Identity API Replacing Five Providers in One
Didit consolidates KYC, AML, biometrics, authentication, and fraud prevention into a single API integration — no more stitching together five providers for.
#identity#kyc#dev-tools
dev-tools
Jibril – Runtime Security for Cloud-Native Infra
Jibril uses eBPF to monitor and enforce security policies directly in the Linux kernel, protecting ephemeral cloud workloads in real time with negligible.
#security#ebpf#devops
ai-setup
Tinfoil – Verifiable Privacy for Cloud AI
Tinfoil runs open-source LLMs on cloud GPUs with hardware-backed privacy guarantees. Your data never leaves the secure enclave—not even Tinfoil can access it.
#privacy#ai#cloud