Encrypted vault, ZK settlement archiving, x402 payment receipts, Agent Passport binding, and Solana anchoring for OpenClaw and agent runtimes. Drop-in stack — compression, privacy, payments, identity.

Local-first context-integrity engine. Reconstructs trust from immutable runtime history, contains risky actions in QTF, and gates promotion through EXT.

High‑performance iocx plugin for detecting Windows Registry keys, values, and persistence locations. Includes full test coverage, performance benchmarks, and security checks.

Educational C2 Framework for Red Team Learning

Deterministic Python CLI for repository hygiene checks and pre-commit secret scanning.

Access Log Correlator - Python based access log correlation tool for detecting failed login bursts with schema validation and JSON output.

Developer-first security automation tool that orchestrates SAST, secrets scanning, and dependency scanning with CI security gates.

behavior based cve detection for react server components

HacxGPT CLI — Open-source command-line interface for unrestricted AI model access with multi-provider support, prompt injection research capabilities, configurable API endpoints, Termux/Linux/Windows compatibility, and Rich terminal UI for security research and red-team evaluation

Terminal flight recorder for CTFs and authorized pentests with structured reporting.

CI gate for RAG corpora: detects prompt-injection indicators, risky markup, PII, and secret-like content.

KYNEĒ — AI-assisted portable security assessment platform for authorized penetration testing and red team operations

Research-preview AWS IAM reasoning tool with bounded evidence, deterministic findings, and explicit non-claims.

Sensitive-data discovery over files — finds PII and secrets, controls false positives with Benjamini–Hochberg FDR (per document), and reports the files it could not read.

Validate Infrastructure as Code against CMMC Level 2 and NIST 800-171 security controls

Ethical red teaming and penetration testing framework aligned to MITRE ATT&CK/ATLAS, OWASP, and NIST

Analyzes whether two detection rules are "the same" — ingests Sigma and MITRE CAR into one ruleset-agnostic IR, then derives FCA concepts and SKOS graded relations. Sameness is a tunable semantic projection.

Rev-AI is an advanced reverse shell implementation that leverages AI (DeepSeek API) to generate Linux commands based on natural language queries. It provides a secure communication channel between a target system and a command server with automatic reconnection capabilities.

Agentic codebase analysis that turns repositories into audit-ready workspaces using static analysis, code graphs, and LLM synthesis.

Deterministic Solidity trust-boundary analysis with Foundry exploit proof generation.