Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.

GitHub Action to prevent certain types of software supply chain attacks

JavaScript Style Guide

The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

Purpose-built security agent for hosted runners

Security proxy for AI agents. Scans every message for prompt injection, PII, and secrets. Defense-in-depth: Go proxy + iptables firewall + eBPF kernel monitor. YAML policy engine, audit logging, 5 …

Independent AI Oversight Layer — monitors what AI agents do on your computer. EDR for AI Agents.

Kernel-Enforced Install-Time Policies (KEIP): An eBPF/LSM based security tool that detects and blocks malicious network activity during pip install.Kernel-Enforced Install-Time Policies (KEIP): An …

Constrain, log and scan your MCP connections for security vulnerabilities.

Reference engine and content library for the Open Vulnerability Remediation Specification (OVRS) — a standard format for describing how to fix vulnerabilities.

PMG protects developers from getting compromised by malicious packages

Protect against malicious open source packages 🤖

Protect against malicious code installed via npm, yarn, pnpm, npx, and pnpx with Aikido Safe Chain. Free to use, no tokens required.

Safely install NPM packages

MCP Monitoring with eBPF

Secure and fast microVMs for serverless computing.

Automatically apply security best practices.

Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.