#devsecops

Rlsgate

The Supabase deploy-gate that runs where you vibe-code. Static OSS scanner for the RLS/secret holes that leak vibe-coded apps — CLI + Claude...

Enterprise Readiness Skill

Agent Skill for enterprise readiness assessment - security, quality, and automation | Claude Code compatible

Coding Ethos

Policy-as-code enforcement for AI agents: MCP server, CEL policies, git hooks, SARIF, and static analysis guardrails.

Waftester

Professional WAF security testing toolkit

MCP Redteam

Active red-teaming for MCP servers. Source analysis + live exploitation + auto-fix. Claude Code plugin.

Guardlink

AI-maintained security annotations for code. Continuous threat modeling, enforced in CI.

Openclaw Security Guard

Complete security layer for OpenClaw - CLI Scanner + Live Dashboard. Secrets detection, config hardening, prompt injection scanning, MCP ser...

Hound MCP

The dependency bloodhound for AI coding agents. Free, no API keys.

SecureAI Scan

SecureAI-Scan is a CLI tool that scans TypeScript and JavaScript codebases for security issues specific to AI-powered apps — prompt injectio...

Aguara

The open source security engine for AI agent and supply-chain trust.

Immunogen

Static, offline-first security scanner for AI-built apps. 0–100 Ship Score across 11 categories — including the AI layer (skills, MCP server...

Leakferret

MCP-native secret scanner in one fast Rust binary: engine, CLI, and MCP server. Finds API keys and secrets, skips known-public fixtures, ver...