Security & Testing Listings
Compare the best open-source listings for security & testing. Scanners, pentest helpers and test automation. Ranked by GitHub stars, with install commands, what each one can touch and scan reports where available.
Redcell
AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/act engine, provider-agnostic models via LiteLLM, PDF/JSON/SARIF output. FastAPI + React.
TORCH
Karpathy LLM based claude harness for PenetrationTesting / Bugbounty using obsidian
Bld
Pure java build tool for developers who don't like dealing with build tools
Halofy
Halofy is the open access and governance layer for AI agents across your organization. Identity, policy, provenance, audit, and signed erasure.
JoySafeter
🚀 JoySafeter: An enterprise AI Agent Platform—Not just chatting. building、running、testing, and tracing autonomous Agent Teams with visual orchestration...
Clawdstrike
Agentic AI EDR for developer workstations and autonomous agent swarms. Build Swarm Detection & Response platforms with Clawdstrike.
Vizra Adk
Build, test, and deploy intelligent AI agents the Laravel way
BurpMCP Ultra
AI-powered MCP server for Burp Suite Professional — 149 tools across proxy, scanner, inline fuzzer, race conditions, guided injection, JWT/IDOR attacks, recon & OOB, with a real-time dashboard and hardened localhost security. Drive Burp from Claude Code or any MCP client.
Guardana
Open-source AI security verification for model artifacts, live endpoints, MCP servers, and recorded agent traces. Reproducible evidence for release decisions.
Arcgentic
Mechanical plan/dev/self-audit/external-audit gates for AI coding agents, with a configurable role-routing topology engine, an MCP-UI live status panel, and native-tooling Claude Code V2 dispatch. Claude Code, Codex, OpenClaw, and PyPI.
Vulnerable MCP Servers Lab
A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers.
SecurityClaw
A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs.
Falcon MCP
Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting
Mirroir MCP
MCP server for controlling a real iPhone via macOS iPhone Mirroring...and any MacOs app. Screenshot, tap, swipe, type — from any MCP client.
Claude Hooks
Lasso security integrations for Claude Code, including prompt-injection defenses
Wazuh MCP Server
Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.
Mathema
Claim-Driven Development: turn software intent into verifiable evidence.
Test Automation Skills Agents
A practical library of agents, instructions, and skills designed specifically for QA Automation Engineers, focusing on production-oriented solutions.
Robotics Skills Suite
76 audit-ready Claude skills automating the industrial robot, cobot, AMR, ROS2, V&V, AI/ML, and IEC 62443 lifecycle. 38 builder + reviewer pairs anchored to ISO 10218, 13849, 62061, 12100, 9283, 15066, 3691-4, and IEC 62443.
Artex Ko Plus
ARTEX 한국어판 ·AI 기반 침해사고 대응 기능 추가 (upstream: Autumn-27/ARTEX, AGPL-3.0)
Agent Audit
Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.
MCP Server Wazuh
MCP Server for Wazuh SIEM
Webqa Agent
Autonomous web browser agent that audits performance, functionality & UX for engineers and vibe-coding creators. 网站自主评估测试 Agent,支持 GUI/CLI 一键完成性能、功能使用与交互体验的测试评估
Qa Skills
50 QA and test-automation skills for Claude Code, Codex, Cursor, and any Agent Skills Standard runtime.
List refreshed November 15, 2026. Data comes from public GitHub repositories.