Detect drift. Defend cloud.
-
Updated
Feb 21, 2026 - Go
Detect drift. Defend cloud.
Encrypted vault, ZK settlement archiving, x402 payment receipts, Agent Passport binding, and Solana anchoring for OpenClaw and agent runtimes. Drop-in stack — compression, privacy, payments, identity.
AI-powered multi-chain Web3 security toolkit. Scan smart contracts across 6 EVM chains in minutes, not weeks.
Security Notes/Tools/Scripts
Deterministic, local-first context builder for flow automation exports: redacts sensitive data, detects risks, and produces auditable bundles for AI assistants and support workflows: flow analysis, subflow expansion, secret redaction, token budgeting, and reproducible bundle generation via CLI and VUE web app.
Local-first context-integrity engine. Reconstructs trust from immutable runtime history, contains risky actions in QTF, and gates promotion through EXT.
Automated reconnaissance and attack-surface analysis pipeline for infrastructure visibility, asset discovery, and vulnerability identification.
Production-grade scripts to deploy, harden, and operate OpenCTI on Ubuntu LTS with the fixes for issues you'd otherwise hit on day one.
High‑performance iocx plugin for detecting Windows Registry keys, values, and persistence locations. Includes full test coverage, performance benchmarks, and security checks.
Educational C2 Framework for Red Team Learning
Deterministic Python CLI for repository hygiene checks and pre-commit secret scanning.
Access Log Correlator - Python based access log correlation tool for detecting failed login bursts with schema validation and JSON output.
Validate Infrastructure as Code against CMMC Level 2 and NIST 800-171 security controls
CI scanner for RAG corpus risks: prompt injection, risky HTML/Markdown, PII, and secret-like content.
Research-preview AWS IAM reasoning tool with bounded evidence, deterministic findings, and explicit non-claims.
Project-aware tabletop exercise generator + AAR drafter for Claude Code
KYNEĒ — AI-assisted portable security assessment platform for authorized penetration testing and red team operations
Terminal flight recorder for CTFs and authorized pentests with structured reporting.
AI-assisted audit notebook generator for Solidity/codebase review: flows, attack surface, risks, and diffs.
HacxGPT CLI — Open-source command-line interface for unrestricted AI model access with multi-provider support, prompt injection research capabilities, configurable API endpoints, Termux/Linux/Windows compatibility, and Rich terminal UI for security research and red-team evaluation
Add a description, image, and links to the security-tooling topic page so that developers can more easily learn about it.
To associate your repository with the security-tooling topic, visit your repo's landing page and select "manage topics."