A multi-agent application-security review harness for Claude Code (and, later, other AI agents). One router skill dispatches to a full offensive-security pipeline that maps a codebase, hunts vulnerabilities with a per-class knowledge base, chains findings into escalations, verifies real impact, and reports to README/JSON/SARIF/doc/PDF.
☆43Oct 15, 2026Updated this week
Alternatives and similar repositories for security-harness
Users that are interested in security-harness are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Designed for managing vulnerability discovery at scale with agentic AI and integrates with HackerOne.☆134Sep 2, 2026Updated last month
- Harness fo malware analysis☆41Aug 23, 2026Updated last month
- ☆97Updated this week
- Native red, blue, and purple security-agent harness for CYBER-FROST☆51Oct 5, 2026Updated last week
- An AI-native penetration testing workbench where you and AI agents work together to accelerate your pentest workflow.☆101Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆24Updated this week
- offsec-ai is a Python library and CLI that combines classic network reconnaissance with modern AI/LLM security testing.☆33Oct 10, 2026Updated last week
- Hardener Plus is an advanced security auditing platform for modern web architectures. It employs dynamic profiling and deep heuristics to…☆83Sep 10, 2026Updated last month
- Tools that lower the barrier to security research on Meta's products, for vetted Meta Bug Bounty researchers. Designed to live where rese…☆244Updated this week
- A curated list of AI-powered pentesting tools, frameworks, MCP servers, and resources for autonomous cybersecurity operations☆90Updated this week
- Android security and penetration testing, from first principles to senior practitioner. 81 chapters, ~327 labs, measured rather than reci…☆62Aug 18, 2026Updated 2 months ago
- Reusable prompts for a structured, evidence-first bug bounty hunting workflow☆621Oct 3, 2026Updated 2 weeks ago
- jev + fs = findme☆26Sep 19, 2026Updated 3 weeks ago
- Exploit watch archive, an automated weekly gather of exploit sources 0/Nday releases☆80Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A skill to help cybersecurity folks update and tweak their resume☆185Sep 20, 2026Updated 3 weeks ago
- sharing some outputs for science☆24Sep 26, 2026Updated 3 weeks ago
- AI Deep SAST - LLM-powered deep static analysis for CI/CD. Combines Semgrep, tree-sitter code indexing and frontier LLMs (e.g. GPT-4o, Cl…☆61Jun 10, 2026Updated 4 months ago
- Given a list of domains and known IP and buckets that are owned, which might be susceptible to domain hijacking?☆16Sep 20, 2024Updated 2 years ago
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆57Sep 15, 2026Updated last month
- ARTEX 한국어판 ·AI 기반 침해사고 대응 기능 추가 (upstream: Autumn-27/ARTEX, AGPL-3.0)☆197Oct 11, 2026Updated last week
- ☆51Aug 17, 2026Updated 2 months ago
- Claude Code plugin for writing triager-grade bug bounty reports☆274Aug 25, 2026Updated last month
- ☆39Sep 8, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Agentic AI security scanner that hunts exploitable vulnerabilities like an adversary, proves them with executable PoCs, and fixes them te…☆741Updated this week
- ☆58Jul 1, 2026Updated 3 months ago
- A simple recon pipeline☆39Sep 24, 2026Updated 3 weeks ago
- Local-first AI red team for web, API, and LLM application security. Attacker-style reasoning, evidence-backed findings, and skills for AI…☆336Sep 14, 2026Updated last month
- Pentest Harness — Heaven for Hackers. A self-hosted AI agent harness for authorized pentests, bug bounty, security labs, and CTFs. Bring …☆423Oct 7, 2026Updated last week
- ARES - authorized red-team engagement automation with dashboard, campaign scope, module orchestration, OPSEC controls, encrypted vault, a…☆631Oct 1, 2026Updated 2 weeks ago
- ☆52Aug 5, 2026Updated 2 months ago
- A practical governance framework for organizations adopting the Model Context Protocol (MCP), the open standard that lets AI agents conne…☆91Sep 8, 2026Updated last month
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated 3 weeks ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI☆123Updated this week
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆69Sep 17, 2026Updated last month
- Cybersecurity Research & Offensive Security Platform☆63Oct 4, 2026Updated 2 weeks ago
- eBPF LSM based Mandatory Access Control and jailer☆86Updated this week
- Sound static analysis and LLM reasoning, in one security agent☆49Oct 10, 2026Updated last week
- A GitHub Action to find and annotate vulnerable Go code☆15Updated this week
- A GUI for Sliver☆168Updated this week