Security & Testing ListingsSecurity & Testing

Nono

agent runtime security - zero trust, zero setup, zero latency agent sandboxing

Cairn

Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin.

Tracecat

Open-source security automation platform for teams and AI agents

VulnClaw

基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。

Ctf Skills

Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more

CyberStrike

Open-source AI-powered offensive security harness for automated penetration testing.

Pentestagent

PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

Agent Scan

Security scanner for AI agents, MCP servers and agent skills.

Pentest Swarm AI

Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.

Web Quality Skills

Agent Skills for optimizing web quality based on Lighthouse and Core Web Vitals.

Mantis

A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.

Open Ontologies

Plan, apply and roll back changes to a production ontology, with a blast radius report and a proof an auditor can re-check.

Shippie

extendable code review and QA agent 🚢

Artex Global

Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)

Open Kritt

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

Pentest AI Agents

Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyze recon, research exploits, build detections, audit STIGs, and write reports.

Toolhive

ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.

Founder Skill

Eleven free Claude skills that test a business before you launch it: a board trained on Hormozi, Thiel and Jobs, a marketing director, a CFO, and a consumer panel of 100 buyer agents. Free, MIT.

Agent Safehouse

Sandbox your local AI agents so they can read/write only what they need

Qu1cksc0pe

All-in-One malware analysis tool.

ADR

ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.

Pentest AI

Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.

Cve MCP Server

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.

LitterBox

A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.