Tools

promptfoo/promptfoo

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and…

cookiengineer/exocomp

Self-hosted multi-agent environment for Go with LLM-powered pentesting agents (exploiter, reverser, threathunter, webscanner) that automate…

nvidia/garak

Modular LLM vulnerability scanner that probes for hallucination, data leakage, prompt injection, jailbreaks, and toxicity using static, dynamic, and…

alegrey91/vex8s

Suppress vulnerabilities applying Kubernetes context to scans

llnl/oghidra

OGhidra bridges Large Language Models (LLMs) via Ollama with the Ghidra reverse engineering platform, enabling AI-driven binary analysis through…

syscallx-18113/apkx-hunter

C-based Android static analysis framework for decompilation, secret detection, endpoint discovery, permission analysis, and native library scanning…

giskard-ai/giskard-oss

🐢 Open-Source Evaluation & Testing library for LLM Agents

jinxhy/awesome-moai-security

Curated reading list and taxonomy of attack and defense research for mobile on-device AI systems, covering adversarial, backdoor, model stealing, and…

0sec-labs/foxguard

A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum audits,…

p-e-w/heretic

Fully automatic censorship removal for language models

mdshoaibuddinchanda/zombieguard

ML-based detection of Zombie ZIP archive header evasion attacks (CVE-2026-0866)

neuromancer/rats-re

Reconstructs legacy Windows binaries into C source by pairing Ghidra decompiler exports with local LLMs, producing compile-checked candidates and…

matheusht/redthread

An autonomous red-teaming engine for LLMs. RedThread manages the full security lifecycle: generating adversarial attacks, executing precision…

pandaadir05/ghost

Detects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process…

cisco-ai-defense/skill-scanner

Security Scanner for Agent Skills

toxy4ny/delirium-ai-safety-benchmark

A diagnostic framework for measuring LLM vulnerability to Affective Contextual Erosion (ACE) and related liminal attack vectors. **Delirium** is not…

mandiant/stringsifter

A machine learning tool that ranks strings based on their relevance for malware analysis.

aloshdenny/reverse-synthid

reverse engineering Gemini's SynthID detection