Ranked by Attention Score: stars gained over the last 30 complete days
13 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
The recursive internet scanner for hackers. 🧡
The FLARE team's open-source tool to identify capabilities in executable files.
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
ThePhish: an automated phishing email analysis tool
Phishing catcher using Certstream
🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.
Prompt-injection firewall for LLM applications — 33 input detectors, 9 output scanners, federated ed25519-signed threat-intel feed. Apache 2.0, 1040 tests, F1 96.0% with 0% false positives. Docker, GitHub Action, LangChain/LlamaIndex/CrewAI integrations.
Extract and aggregate threat intelligence.
Agentic memory for CTI in Python — STIX knowledge graphs, threat-actor alias resolution, offline-first RAG, MCP server for Claude Code and LangChain agents
Malcom - Malware Communications Analyzer
🚌 Threat Bus – A threat intelligence dissemination layer for open-source security tools.