
cve-bench
A benchmark for evaluating AI agents on fixing real-world security vulnerabilities.

A benchmark for evaluating AI agents on fixing real-world security vulnerabilities.

Benchmarking framework for evaluating computer-use AI agents against multi-step indirect prompt injection, with automatic adversarial goal…

Research code for HARDE, an agent harness that probes and adaptively optimizes components for runtime risk detection and execution control across…

Black-box input-stage purification defense that neutralizes backdoor attacks on object detectors via corruption, diffusion reconstruction, and DBSCAN…

VulnAgent-X: A Layered Agentic Framework for Repository-Level Vulnerability Detection

Composable research-contract and YAML-recipe framework for agent-operated security experiments on disposable compute

Anticipator is an open-source threat detection platform for multi-agent AI systems.

AI-powered Windows diagnostic & auto-repair tool using Google Gemini. Detect crashes, optimize performance, scan for malware, and generate PowerShell…

A collection of hacking / penetration testing resources to make you better!

Reverse engineer anything with agents, from app behavior down to native binaries.

AI-powered skill router pack for reverse engineering, penetration testing, and security research. Routes AI agents to correct methodologies and…

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3…

Agent-powered vulnerability scanner for large-scale codebases. Uses LLMs to find hard-to-detect security issues via regex matchers and AI…

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate…

SHAREM is a shellcode analysis framework, capable of emulating more than 45,000 WinAPIs and virutally all Windows syscalls. It also contains its own…

Secure runtime to sandbox AI agent tasks. Run untrusted code in isolated WebAssembly environments.

Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection…

Automated security analysis pipeline that runs CodeQL queries on GitHub repositories and uses LLMs to classify and filter true vulnerabilities from…