security-testing

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

The AI Agent for Cyber Security.

PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.

MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.

Open-source adversary emulation for AI agents and MCP servers.

Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI coding agents.

DodoGuard: Full‑lifecycle agent security for Dify, Coze, FastGPT, n8n, Tencent ADP, ByteDance HiAgent, and more.

Security testing that runs inside the coding agent you already use. Source-available, not open source.

Whitebox & Blackbox AI red-teaming framework for LLMs & Agentic AI apps. It analyzes your app's source code to discover tools, roles, and guardrails, then generates new attacks chains across several categories and adapts over multiple multi turn rounds to find vulnerabilities

GitHub Action安全工具，可以将Action Secrets还原拿到明文，用于证明Secrets并不是绝对的安全。（测试通过，放心使用，再有问题来issues区锤我...）

Stigix is a lab platform to validate SD‑WAN and SASE. ​ It unifies SaaS traffic generation, security tests, convergence probes, and voice/IoT/VyOS simulations in one web UI

All AIs are sycophants.

Guarded MCP tools for AI-assisted mobile build, Appium testing, security scanning, verification, and fix-retest loops.

Production-grade Playwright + TypeScript QA framework with AI-powered testing, LLM-as-Judge evaluation, MCP server, 7 CLI agents, security fuzzing, CI/CD pipelines, Jira sync, and Slack reporting — zero-config, plug-and-play.

AI-powered test case generation platform that automatically creates unit, integration, security, performance, and edge-case test scenarios from source code, APIs, and requirements using Google Gemini AI.

HTTP session viewer

TestAtlas — a free, open-source Software Testing curriculum. 11 learning paths (10 certified Reference Curricula + Foundations), 225 modules covering manual, API, automation, performance, security & mobile testing.

Security-C4PO is an open-source web-application for managing and documenting penetration tests. This tool allows a security tester to keep track of the testing progress according to the OWASP Testing Guide. This application aims to make the offical Testing Guide more actionable to work with.

Security advisor for ready to serve files

Multi-Container Firefox Extension for Security Testing and BugBounty Hunters.