Repository Index

the LLM vulnerability scanner

• ai
• llm-evaluation
• llm-security
• security-scanners

🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.

• adversarial-ai
• claude-code
• cursor
• electron-security

AI Agent Identity and Access Management and Inference Firewall

• agent-identity
• ai-audit
• ai-firewall
• ai-gateway

Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.

• agent-security
• ai-agents
• audit-log
• claude-code

Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.

• agent-security
• ai-security
• llm-security
• mcp-security

Runtime defense against memory poisoning in AI agents (OWASP ASI06). Drop-in for LangChain, OpenAI Agents, AutoGen, CrewAI and mem0.

• ai-agents
• langchain
• llm-security
• memory-poisoning

Local-first policy gateway for coding agents. Allow, review, or block MCP, shell, SQL, GitHub, and HTTP actions with scoped credentials and signed evidence.

• golang
• observability
• opentelemetry
• policy-engine

Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.

• agentic-ai
• ai-safety
• fastapi
• langchain

HTTP honeypot on autopilot

• canarytokens
• deception
• deception-technology
• honeypot