#1API key scanning, credential leak detection, and secret management tools.
Kitploit recommended
snyk/agent-scanSecurity scanner for AI agents, MCP servers and agent skills.
prismorsec/prismorSelf-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt…
infisical/infisicalInfisical is the open-source platform for secrets, certificates, and privileged access management.
trufflesecurity/trufflehogFind, verify, and analyze leaked credentials
matijamiki/ranwhatFlight recorder and secret scanner for AI coding agents. Reads what Claude Code, Codex, Gemini CLI and 17 more ran, and flags risky actions and…
owasp/cve-lite-cliFast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix,…
hashgraph-online/hol-guardOpen-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at…
getsops/sopsSimple and flexible tool for managing secrets
sheeki03/tirithTerminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and…
moltis-org/moltisA secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord,…
mongodb/kingfisherDetect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
nvidia/openshellSandboxed runtime for autonomous AI agents with declarative YAML policies enforcing filesystem, network, and process constraints, plus endpoint-bound…
dracondev/dracon-utilitiesInvisible infrastructure for Dracon developer workspaces: git sync, system guard, and warden encryption utilities.
mindersec/minderSoftware Supply Chain Security Platform
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
praetorian-inc/titusHigh-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
anchore/grypeA vulnerability scanner for container images and filesystems
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
