Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Sandbox for developing and testing UI components in isolation
Fastest 5KB JS implementation of secp256k1 signatures and ECDH
The AI Agent for Cyber Security.
Fastest 5KB JS implementation of ed25519 signatures
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.
- agent-security
- ai-security
- llm-security
- mcp-security
Advanced, but minimalistic Next.js and Apollo starter
- typescript
- react
- apollo
- testing-library
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
A flexible playground for Android CTF challenges.
A Chargebee focused T3 Stack that integrates User Subscriptions, Authentication and Testing. Driven by Prisma ORM. Deploys to Vercel
Free online developer tools - JSON Formatter, JWT Decoder, Regex Tester & more