llm-security

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less than 120 seconds.

the LLM vulnerability scanner

NeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems.

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

🐢 Open-Source Evaluation & Testing library for LLM Agents

AI-powered bug bounty hunting toolkit that works with or without subscription.

agent runtime security - zero trust, zero setup, zero latency agent sandboxing

[CCS'24] A dataset consists of 15,140 ChatGPT prompts from Reddit, Discord, websites, and open-source datasets (including 1,405 jailbreak prompts).

A collection of scientific methods, processes, algorithms, and systems to build stories & models.

Open-source AI-powered offensive security harness for automated penetration testing.

The Security Toolkit for LLM Interactions

A secure low code deception runtime framework, leveraging AI for System Virtualization.

ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.

Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪

🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.

A powerful tool for automated LLM fuzzing. It is designed to help developers and security researchers identify and mitigate potential jailbreaks in their LLM APIs.

OWASP Top 10 for Large Language Model Apps (Part of the GenAI Security Project)

🛡️ Free open-source AI-powered security terminal & vulnerability scanner (CVE, SBOM). Supports SSH, SFTP, RDP, VNC, Serial, and 12+ autonomous AI agents (DeepSeek, OpenAI) for automated security workflows, CTF & DevSecOps. Cross-platform & Web UI.

Open-source autonomous AI penetration testing. 50 specialist agents across web, API, cloud, Active Directory, Kubernetes, CI/CD and AI/LLM (OWASP LLM Top 10). Runs on a local LLM behind a Privacy Gateway. Integrates with GitHub, GitLab, Jenkins, VS Code, JetBrains, n8n, Grafana & Splunk.