#1LLM security, prompt injection, model extraction, adversarial AI, and AI red teaming tools.
Kitploit recommended
owasp/appsec-agentA TypeScript package that provides AI-powered agents for Application Security (AppSec) tasks, built on top of the frontier models.
owasp/donkaiDonkAI is a hands-on lab for the OWASP Top 10 for LLM Applications (2025) - no real LLM required.
owasp/cornucopiaThe source files and tools needed to build the OWASP Cornucopia decks in various languages
owasp/docksecAI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.
owasp/mosaicCoordination structure for AI security standards and guidelines, reducing fragmentation and providing clear guidance for securing AI systems across…
roxanne_ardary/aureaAurea is an open-source, AI-powered platform that secures infrastructure-as-code (IaC) across Terraform, Kubernetes, Docker, and Ansible. It…
cisco-ai-defense/skill-scannerSecurity Scanner for Agent Skills
trailofbits/slither-mcpMCP server for Slither static analysis of Solidity smart contracts
trustedsec/ts_llmlibPython library for local LLM-powered security analysis with Ghidra binary analysis, C/C++ vulnerability scanning, and MCP tool integration for…
canyonroad/agentshExecution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.
goochbeater/spiritual-spell-red-teamingA repo for jailbreaking various LLMs, mainly Claude
amnsecurity/litellm-command-injection-security-assessmentProfessional vulnerability assessment report for LiteLLM command injection risk, including executive summary, technical impact, remediation, and…
adshao/flounderAutonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.
onecli/onecliOpen-source sandboxed agent harness for teams. Giving every employee a secured personal agent.
bytepro-ai/bitcoder-v2-researchResearch repository documenting LLM generalization ceilings in code security vulnerability detection, with cross-evaluation across synthetic and…
provos/ironcurtainA secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)
ustayready/cloudgptVulnerability scanner for AWS customer managed policies using ChatGPT
projectdiscovery/nuclei-templates-aiRepository of AI-generated Nuclei templates for public CVEs not yet covered by existing templates, enhancing detection speed and coverage 👾
