Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS, runs offline.
☆144Oct 8, 2026Updated last month
Alternatives and similar repositories for AI-Surface
Users that are interested in AI-Surface are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- See what your AI agents can access. Scan MCP configs for exposed secrets, shadow APIs, and AI models. Generate AI-BOMs for compliance.☆166Aug 18, 2026Updated 2 months ago
- API security rules and skills for AI coding agents: Claude Code, Cursor, GitHub Copilot, Codex, Gemini CLI, Windsurf. OWASP API Security …☆21Sep 25, 2026Updated last month
- This action triggers on-demand scans for projects registered in APIsec.☆29May 16, 2024Updated 2 years ago
- ☆24Oct 24, 2024Updated 2 years ago
- Empirical taxonomy of BOLA from 108 HackerOne disclosures☆16Jun 9, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Code examples for my book "Secure APIs"☆18Oct 10, 2025Updated last year
- ☆19Jun 28, 2026Updated 4 months ago
- Run NVIDIA DGX Cloud Benchmarks on Kubernetes, vCluster, and bare metal GPUs — single command☆16Jul 7, 2026Updated 4 months ago
- APIsec|SCAN - Free API security testing using Github actions☆101May 2, 2024Updated 2 years ago
- Open-source toolkit to identify privilege escalation paths on Linux systems.☆23Feb 23, 2026Updated 8 months ago
- Framework-neutral control contract for AI agents: eight interception points, three verdicts, and a conformance kit.☆26Updated this week
- The tool helps in quickly identifying vulnerabilities by examining a comprehensive list of potential paths on a website, making it useful…☆11Mar 24, 2025Updated last year
- Jumpstart multiple WebSocket servers quickly☆35Nov 23, 2021Updated 4 years ago
- A CMS-aware OSINT and recon tool for red teamers and bug bounty hunters — detects CMS, finds login portals, scrapes usernames, and genera…☆14Jul 14, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Custom nuclei templates for bug hunting.....☆26May 30, 2024Updated 2 years ago
- YWH Programs Selector is a CLI tool to filter bug bounty programs from platforms like YesWeHack☆11Jan 29, 2026Updated 9 months ago
- Defending APIs, Published by Packt☆25Oct 1, 2026Updated last month
- A free course on machine learning for cybersecurity and the security of machine learning, with lessons, runnable labs, exercises and quiz…☆23Oct 16, 2026Updated 3 weeks ago
- Open-source AI-powered offensive security harness for automated penetration testing.☆16Sep 7, 2026Updated 2 months ago
- A reverse shell in PHP using Unicode encoding as variable assignment☆19Mar 8, 2021Updated 5 years ago
- A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the ac…☆20Apr 11, 2022Updated 4 years ago
- Harness fo malware analysis☆43Aug 23, 2026Updated 2 months ago
- A collection of Script for Red Team & Incidence Response☆11Jun 30, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆199Mar 16, 2026Updated 7 months ago
- ☆20Jan 14, 2026Updated 10 months ago
- A deliberately vulnerable banking application designed for practicing Security Testing of Web App, APIs, AI integrated App and secure cod…☆999Nov 4, 2026Updated last week
- OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research tea…☆20Sep 22, 2021Updated 5 years ago
- ☆14Dec 24, 2024Updated last year
- Export CyberArk PVWA data (users, groups, safes, accounts and permissions) into a BloodHound-compatible OpenGraph JSON file for security …☆43Updated this week
- ☆16Oct 19, 2020Updated 6 years ago
- Easily scan for CVEs using nmap.☆16Jan 13, 2022Updated 4 years ago
- ☆18May 25, 2026Updated 5 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Lightning-fast domain validator for security research. Multi-threaded scanning, smart verification, clean output for pipelines. Ideal for…☆14Dec 9, 2025Updated 11 months ago
- All the deals for InfoSec related software/tools this Black Friday☆264Nov 28, 2025Updated 11 months ago
- OWASP Foundation web repository☆160Oct 22, 2026Updated 3 weeks ago
- ☆36Jun 21, 2024Updated 2 years ago
- A Burp Suite jython extension that saves a URL List from the Burp Proxy History or Burp Target Site Map as a text file.☆10Jun 11, 2013Updated 13 years ago
- RedAudit is a next-generation Windows forensic and security assessment framework featuring a live cyber-operations GUI built for real inv…☆36Nov 15, 2025Updated 11 months ago
- GitHub Workflows Insights☆47Jun 27, 2026Updated 4 months ago
Are these results useful?