Best AI tools for< Security Analyst >
Infographic
136 - AI tool Sites
Sentitrac
Sentitrac.com is a website that focuses on security verification for users. It ensures the security of connections by verifying the user as human before proceeding. The site may prompt users to enable JavaScript and cookies for a seamless experience. Performance and security are enhanced through the use of Cloudflare services.
Remy
Remy is an AI-powered platform designed to help product security and compliance teams resolve security risks early. It offers scalable design review capabilities, automates review initiation, generates tailored questions, and provides clear metrics and audit trails. Remy aims to augment and scale product security teams by ensuring full visibility on risky engineering plans and automating tedious review processes. The platform is built for enterprise readiness, offering SSO for convenient logins, scalability, and customization.
faye.xyz
faye.xyz is a website that encountered an SSL handshake failed error with Cloudflare. The error code 525 indicates the failure to establish an SSL connection to the origin server. The website provides troubleshooting information for visitors and owners to resolve the issue. Cloudflare is a service that enhances website performance and security.
ai.prodi.gg
The website ai.prodi.gg is currently experiencing an Origin DNS error, which is preventing the resolution of the requested domain. It is hosted on the Cloudflare network, a content delivery network and distributed domain name server service. The error message suggests troubleshooting steps for both visitors and website owners. Visitors are advised to try again later, while website owners are prompted to check their DNS settings, especially if using a CNAME origin record. The page also provides additional troubleshooting information for further assistance.
OpenResty
The website appears to be displaying a '403 Forbidden' error message, which indicates that the server understood the request but refuses to authorize it. This error is often encountered when trying to access a webpage without proper permissions. The message 'openresty' suggests that the server may be using the OpenResty web platform. OpenResty is a dynamic web platform based on NGINX and LuaJIT, commonly used for building scalable web applications and services. It provides a powerful set of features for web development and performance optimization.
Escape
Escape is an API Security Platform that offers automated API discovery and security solutions. It helps users secure their APIs at scale by providing features such as API documentation generation, automated testing, compliance management, and developer-friendly remediations. The platform aims to reinvent API security by offering fast deployment, comprehensive API visibility, and prioritization of critical vulnerabilities. Escape is trusted by over 2000 security teams worldwide and is designed to address the evolving challenges of API security in modern application architectures.
Spot AI
Spot AI is a Video AI platform that transforms cameras into intelligent tools to secure, protect, and optimize operations. It offers features such as real-time visibility, incident resolution, worker safety, and training. The platform includes AI agents, semantic search, and state-of-the-art video AI models to drive business outcomes and enhance productivity. Spot AI is trusted by over 1,000 organizations to reduce workplace injuries, improve incident resolution time, and increase operational throughput.
Cloudflare
Cloudflare is a platform that offers a range of products and services to help individuals and organizations improve their online presence. It provides tools for web analytics, troubleshooting errors, domain registration, and network security. Cloudflare also offers developer products like Workers and Pages, as well as AI products such as Workers AI and AI Gateway. With a focus on security and performance, Cloudflare aims to make the internet faster, more secure, and more reliable for users worldwide.
icetana
icetana is an AI Security Video Analytics Software that offers Safety and Security Analytics, Forensic Quick Find, Facial Recognition, Licence Plate Recognition, and GPT Event Finder. The core product connects with existing security cameras to detect unusual or interesting events across large surveillance networks. It helps users stay ahead of security incidents with immediate alerts and allows cameras to detect potential security breaches before they happen. icetana AI enhances security and safety through advanced surveillance, covering theft, medical emergencies, routine monitoring, and prevention. The AI continuously evolves, offers real-time event detection, reduces false alarms, and is easy to configure with user-friendly setup.
Scholarcy
Scholarcy.com is a website that offers a security service to protect itself from online attacks. Users may encounter a block when triggering certain actions like submitting specific words or phrases, SQL commands, or malformed data. In such cases, users can contact the site owner to resolve the issue by providing details of the incident. The service is powered by Cloudflare, a performance and security provider.
403 Forbidden
The website seems to be experiencing a 403 Forbidden error, which indicates that the server is refusing to respond to the request. This error is often caused by incorrect permissions on the server or misconfigured security settings. The message '403 Forbidden' is a standard HTTP status code that indicates the server understood the request but refuses to authorize it. Users encountering this error may need to contact the website administrator for assistance in resolving the issue.
Frigate
Frigate is an open source NVR application that enables users to monitor security cameras with locally processed AI object detection. It offers custom models, reduces false positives, fine-tunes events and alerts, and integrates with various home automation platforms. Frigate ensures privacy by performing all processing locally on the user's hardware, without sending camera feeds to the cloud.
DTiQ
DTiQ is a leading provider of loss prevention and intelligent video solutions for businesses in the United States and globally. The company offers a range of products and services, including SmartAudit, SmartAnalysis, and SmartAssurance, designed to help businesses improve operational quality, reduce theft, and enhance customer experience. DTiQ's solutions are trusted by hundreds of brands across various industries, such as quick service restaurants, convenience stores, and retail outlets. With a focus on security, innovation, and support, DTiQ aims to help businesses run smarter and more efficiently.
403 Forbidden Resolver
The website seems to be experiencing a 403 Forbidden error, which typically indicates that the server is refusing to respond to the request. This error message is often displayed when the server does not want to reveal why the request has been refused, or when no other response is applicable. The 'openresty' mentioned in the text is likely referring to the web server software being used. It is important to troubleshoot and resolve the 403 Forbidden error to ensure proper access to the website.
medium.engineering
medium.engineering is a website that provides security verification services to ensure the safety of user connections. It verifies the authenticity of users to prevent unauthorized access and protect against potential security threats. The platform conducts security checks by enabling JavaScript and cookies, and utilizes Cloudflare for performance and security enhancements.
Facia.ai
Facia.ai is a cutting-edge AI tool that offers the fastest and most accurate liveness detection and deepfake detection solutions. It empowers businesses globally with advanced facial recognition technology, providing services for industries such as retail, government, dating apps, event management, and more. The platform ensures security, prevents identity fraud, and enhances customer authentication processes through innovative AI-powered features.
403 Forbidden Resolver
The website seems to be experiencing a 403 Forbidden error, which means the server is refusing to respond to the request. This could be due to various reasons such as insufficient permissions, server misconfiguration, or a client error. The error message '403 Forbidden' is a standard HTTP status code that indicates the server understood the request but refuses to authorize it. It is important to troubleshoot and resolve this issue to ensure proper access to the website.
DryRun Security
DryRun Security is an AI-powered security tool designed to provide developers with security context and analysis for code changes in real-time. It offers a suite of analyzers to identify risky code changes, such as SQL injection, command injection, and sensitive file modifications. The tool integrates seamlessly with GitHub repositories, offering developers a security buddy to enhance code security without slowing down the development process. DryRun Security aims to improve developer productivity, protect code repositories, and provide security context before code merges.
Sider.ai
Sider.ai is an AI tool that focuses on verifying human users and ensuring secure connections. It performs security checks to prevent unauthorized access and protect user data. By enabling JavaScript and cookies, users can continue with the verification process. Sider.ai leverages AI technology to enhance performance and security, providing a seamless user experience.
Mintlify
The website writer.mintlify.com encountered an SSL handshake failed error (Error code 525) due to Cloudflare being unable to establish an SSL connection to the origin server. The issue may be related to incompatible SSL configuration with Cloudflare, possibly due to no shared cipher suites. Visitors are advised to try again in a few minutes, while website owners may need to troubleshoot the SSL configuration. The website is hosted on Cloudflare and the error occurred in Singapore.
403 Forbidden Error Page
The website displays a '403 Forbidden' error message, indicating that the server understood the request but refuses to authorize it. This error is often encountered when trying to access a webpage without proper permissions. The message 'openresty' suggests that the server is using the OpenResty web platform, which is based on NGINX and Lua programming language.
dexa.ai
dexa.ai is an AI tool designed to verify the security of user connections. It ensures that the connection is secure before proceeding with any actions. The tool performs a quick verification process to confirm the user's identity and enable safe browsing. dexa.ai leverages AI technology to enhance security measures and protect user data from potential threats.
403 Forbidden
The website is currently displaying a '403 Forbidden' error, which indicates that the server is refusing to respond to the request. This error is often caused by insufficient permissions or misconfiguration on the server side. The 'openresty' mentioned in the text is a web platform based on NGINX and LuaJIT, commonly used for building high-performance web applications. It seems that the website is currently inaccessible due to server-side issues.
DevOps Security Platform
DevOps Security Platform is an AI-native security tool designed to automate security requirements definition, enforcement, risk assessments, and threat modeling. It helps companies secure their applications by identifying risks early in the Software Development Lifecycle and enforcing security controls effectively. The platform offers innovative features, AI-generated questionnaires, and the ability to customize, automate, and integrate security processes. DevOps Security Platform aims to empower security champions and prevent security vulnerabilities through a centralized and automated approach.
Veriff
Veriff.com is an AI-powered identity verification platform designed for fraud prevention, compliance, and enhancing customer safety. It offers a range of services such as document verification, proof of address, database verification checks, biometric authentication, and more. Veriff combines AI technology with human verification teams to ensure secure and seamless user experiences while combating fraudulent activities. The platform helps businesses build trusted digital communities, improve user experience, and drive growth by safeguarding customer identities.
Sider.ai
Sider.ai is a web application that focuses on verifying user identity and ensuring secure connections. It performs security checks to prevent unauthorized access and protect user data. The platform requires users to enable JavaScript and cookies for a seamless experience. Sider.ai employs Cloudflare for performance and security enhancements.
Ambient.ai
Ambient.ai is an AI-powered physical security software that simplifies and automates security processes. It helps in detecting threats in real-time, auto-clearing false alarms, accelerating investigations, and monitoring for various threats 24/7. The software is trusted by leading security teams worldwide and offers rich integration ecosystem, detections for a spectrum of threats, unparalleled operational efficiency, and enterprise-grade privacy.
Access Denied Error
The website appears to be experiencing an 'Access Denied' error, preventing users from accessing a specific page related to a domain sale. The error message indicates that the user lacks permission to view the content. The issue may be related to server restrictions or misconfiguration. The error reference number is provided for troubleshooting purposes.
Turing.school
Turing.school is a website that focuses on verifying human users for security purposes. It ensures that the connection is secure before proceeding with any actions on the site. Users may encounter a brief waiting period while the verification process takes place. The site utilizes JavaScript and cookies to enhance security measures. Additionally, it employs Cloudflare for performance and security enhancements.
Smaty.xyz
Smaty.xyz is a comprehensive platform that provides a suite of tools for code generation and security auditing. With Smaty.xyz, developers can quickly and easily generate high-quality code in multiple programming languages, ensuring consistency and reducing development time. Additionally, Smaty.xyz offers robust security auditing capabilities, enabling developers to identify and address vulnerabilities in their code, mitigating risks and enhancing the overall security of their applications.
403 Forbidden
The website displays a '403 Forbidden' error message, indicating that the server understood the request but refuses to authorize it. This error is typically due to insufficient permissions or server misconfiguration. The 'openresty' mentioned in the text refers to a web platform based on NGINX and LuaJIT, often used for building dynamic web applications. The website seems to be experiencing server-side issues preventing access to the requested resource.
Magicbookifier.ai
Magicbookifier.ai is an AI tool designed to enhance the security of online connections by verifying the user's identity. It ensures a secure browsing experience by reviewing the security aspects before allowing access to the website. The tool aims to protect users from potential threats and ensure a safe online environment. Magicbookifier.ai utilizes advanced technologies to verify human users and prevent unauthorized access.
Rebuff AI
Rebuff AI is an AI tool designed as a self-hardening prompt injection detector. It is built to strengthen itself against attacks, making it a robust solution for detecting and preventing prompt injection vulnerabilities. The tool provides an API for developers to integrate prompt injection detection capabilities into their applications easily. Rebuff AI aims to protect the AI community by enhancing the security of AI systems and applications.
Tweetify.it
Tweetify.it is a website that verifies the user's human identity before proceeding. It ensures security by reviewing the connection and requires enabling JavaScript and cookies for further interaction. The site is powered by Cloudflare for performance and security purposes.
403 Forbidden
The website seems to be experiencing a 403 Forbidden error, which indicates that the server is refusing to respond to the request. This error is often caused by incorrect permissions on the server or misconfigured security settings. The message 'openresty' suggests that the server may be running on the OpenResty web platform. OpenResty is a web platform based on NGINX and LuaJIT, known for its high performance and scalability. Users encountering a 403 Forbidden error on a website may need to contact the website administrator or webmaster for assistance in resolving the issue.
Dexa.ai
Dexa.ai is an AI tool designed to verify the authenticity of users by reviewing the security of their connection. It ensures a secure and reliable interaction by confirming human presence through a quick verification process. Dexa.ai leverages advanced technologies like JavaScript and cookies to enhance performance and security, providing a seamless user experience. With the support of Cloudflare, it offers robust protection against potential threats, making it a trusted solution for online security.
Ascento
Ascento is an AI-powered robotics solution that enhances security by utilizing robotics and AI technology to secure assets and provide quantitative insights of premises. The application offers features such as detecting people on premises, verifying perimeter integrity, recording property lights, scanning for thermal anomalies, controlling parking lots, and checking doors and windows. Ascento provides advantages like faster threat detection with greater accuracy, cost reduction, autonomous operation, all-terrain capabilities, and comprehensive Robotics-as-a-Service solution. However, some disadvantages include the need for immediate cost-benefits, training and onboarding requirements, and potential limitations in certain weather conditions.
OpenResty
The website displays a '403 Forbidden' error message, indicating that the server understood the request but refuses to authorize it. This error is often caused by insufficient permissions or misconfiguration on the server side. The 'openresty' mentioned in the text refers to a web platform based on NGINX and LuaJIT, commonly used for building high-performance web applications. The page may be inaccessible due to security measures or server misconfigurations.
Cloudflare CNAME Cross-User Banned
The website page is related to a Cloudflare error message regarding CNAME Cross-User Banned. It explains the issue of requesting a page on a website that is part of the Cloudflare network and the restrictions related to CNAME configuration across accounts. The message provides guidance on what to do if encountering this error and directs users to Cloudflare's documentation for further information.
GitHub
GitHub is a collaborative platform for building and shipping software that offers various features such as GitHub Copilot for AI-powered coding assistance, security tools for finding and fixing vulnerabilities, automation of workflows, instant development environments, project management, code review, and collaboration tools. It aims to simplify the software development process and improve developer productivity by leveraging AI technology.
Teleport
Teleport is a modern access platform for infrastructure that provides on-demand, least privileged access with a focus on cryptographic identity and zero trust security. It simplifies zero trust security for AWS and offers solutions for improving engineer productivity, protecting infrastructure, meeting compliance requirements, and modernizing privileged access management. Teleport is trusted by market leaders and offers more than 170 integrations for accessing clouds, data centers, and various resources.
OpenResty Server
The website is currently displaying a '403 Forbidden' error, which indicates that the server understood the request but refuses to authorize it. This error is typically caused by insufficient permissions or misconfiguration on the server side. The 'openresty' message suggests that the server is using the OpenResty web platform, which is based on NGINX and Lua programming language. Users encountering this error may need to contact the website administrator for assistance in resolving the issue.
Global Threat
Global Threat is an AI-driven platform that provides real-time global threat assessment by continuously monitoring and analyzing various data sources worldwide. It empowers users, governments, organizations, and security teams with comprehensive insights into evolving threats, utilizing advanced data analytics, machine learning algorithms, and predictive modeling. The platform offers actionable intelligence on geopolitical shifts, cyber threats, natural disasters, and public health emergencies to keep users ahead of potential risks. Stay informed, prepared, and protected with unparalleled efficiency and accuracy in a data-driven security intelligence era.
Zensors
Zensors is an AI application that offers Visual AI agents for real-world understanding. It provides a Spatial AI platform for spatial monetization, Virtual Manager AI solution to automate location operations, and On-Prem AI for understanding spaces, monitoring service processes, forecasting accurately, and ensuring efficiency. Zensors leverages Multimodal AI for video understanding and Spatial AI for structuring unstructured data. The application caters to various industries such as Aviation, Retail, and Commercial Real Estate, offering operational efficiencies, strategic planning, financial performance, safety, and sustainability through AI-driven solutions.
Hoop.dev
Hoop.dev is an AI-powered application that provides live data masking in Rails console sessions. It offers shielded Rails console access, automated employee onboarding and off-boarding, and AI data masking to protect sensitive information. The application allows for passwordless authentication via Google SSO with MFA, auditability of console operations, and compliance with various security controls and regulations. Hoop.dev aims to streamline Rails console operations, reduce manual workflows, and enhance security measures for user convenience and data protection.
403 Forbidden Analyzer
The website seems to be experiencing a 403 Forbidden error, which indicates that the server is refusing to fulfill the request. This error message is typically displayed when the server recognizes the request but is refusing to authorize it. The '403 Forbidden' error can occur due to various reasons, such as insufficient permissions, IP blocking, or misconfigured server settings. It is important to troubleshoot and resolve the underlying cause to regain access to the website.
Federal Travel Regulations
Federaltravelregulations.com is a website that verifies users as human before allowing access to its content related to federal travel regulations. Users may encounter a brief waiting period for security checks. The site ensures a secure connection by reviewing the security of the user's connection before proceeding. It is essential to enable JavaScript and cookies to continue accessing the site. The performance and security of the website are managed by Cloudflare.
Theresanaiforthat.com
Theresanaiforthat.com is a website that provides a platform for users to verify their identity as human users before accessing the content. The site ensures security by reviewing the connection and requires enabling JavaScript and cookies for continued access. It utilizes Cloudflare for performance and security measures.
OpenResty
The website is currently displaying a '403 Forbidden' error, which indicates that the server understood the request but refuses to authorize it. This error is often encountered when trying to access a webpage without the necessary permissions. The 'openresty' mentioned in the text is likely the software running on the server. It is a web platform based on NGINX and LuaJIT, known for its high performance and scalability in handling web traffic. The website may be using OpenResty to manage its server configurations and handle incoming requests.
Metaverse InsightHack
Metaverse.insighthack.com is a website that focuses on security verification for user connections. It verifies the user as human and reviews the security of the connection before proceeding. The site ensures a safe browsing experience by enabling JavaScript and cookies. It utilizes Cloudflare for performance and security measures.
Hatchet
Hatchet is an AI companion designed to assist on-call engineers in incident response by providing intelligent insights and suggestions based on logs, communications channels, and code analysis. It helps save time and money by automating the triaging and investigation process during critical incidents. The tool is built by engineers with a focus on data security, offering self-hosted deployments, permissions, audit trails, SSO, and version control. Hatchet aims to streamline incident resolution for tier-1 services, enabling faster response and potential problem resolution.
Lakera
Lakera is the world's most advanced AI security platform that offers cutting-edge solutions to safeguard GenAI applications against various security threats. Lakera provides real-time security controls, stress-testing for AI systems, and protection against prompt attacks, data loss, and insecure content. The platform is powered by a proprietary AI threat database and aligns with global AI security frameworks to ensure top-notch security standards. Lakera is suitable for security teams, product teams, and LLM builders looking to secure their AI applications effectively and efficiently.
Pentest Copilot
Pentest Copilot by BugBase is an ultimate ethical hacking assistant that guides users through each step of the hacking journey, from analyzing web apps to root shells. It eliminates redundant research, automates payload and command generation, and provides intelligent contextual analysis to save time. The application excels at data extraction, privilege escalation, lateral movement, and leaving no trace behind. With features like secure VPN integration, total control over sessions, parallel command processing, and flexibility to choose between local or cloud execution, Pentest Copilot offers a seamless and efficient hacking experience without the need for Kali Linux installation.
klu.ai
klu.ai is an AI-powered platform that focuses on security verification for online connections. It ensures a safe browsing experience by reviewing and enhancing the security measures of the user's connection. The platform utilizes advanced algorithms to detect and prevent potential threats, providing users with a secure environment for their online activities.
ZeroGPTDetector
ZeroGPTDetector is a website that focuses on verifying human users and ensuring secure connections. It performs security checks to prevent automated bots from accessing the site. Users may encounter a brief waiting period during the verification process. The site utilizes JavaScript and cookies for seamless browsing. Powered by Cloudflare, ZeroGPTDetector prioritizes performance and security for a safe online experience.
SENEX
SENEX is an AI-powered Blockchain company that aims to create the world's finest Intelligent Chain. It combines Artificial Intelligence with Blockchain technology to provide a privacy-compliant and secure platform for digital users and businesses. SENEX's Intelligent Chain distributes data processing across the network while keeping information private and secure, giving users the benefits of anonymity. The company's AI-powered solutions address various challenges and problems in industries such as healthcare, finance, transportation, and education.
CensysGPT Beta
CensysGPT Beta is a tool that simplifies building queries and empowers users to conduct efficient and effective reconnaissance operations. It enables users to quickly and easily gain insights into hosts on the internet, streamlining the process and allowing for more proactive threat hunting and exposure management.
Link Shield
Link Shield is an AI-powered malicious URL detection API platform that helps protect online security. It utilizes advanced machine learning algorithms to analyze URLs and identify suspicious activity, safeguarding users from phishing scams, malware, and other harmful threats. The API is designed for ease of integration, affordability, and flexibility, making it accessible to developers of all levels. Link Shield empowers businesses to ensure the safety and security of their applications and online communities.
Resemble AI
Resemble AI is a cutting-edge generative voice AI platform that empowers enterprises with advanced voice cloning, deepfake detection, and AI watermarking capabilities. Our suite of tools enables the creation of realistic synthetic voices, detection of AI-generated content, and protection of intellectual property. With Resemble AI, businesses can enhance customer service, elevate gaming experiences, revolutionize entertainment, and safeguard their digital assets.
CYBER AI
CYBER AI is a security report savant powered by DEPLOYH.AI that simplifies cybersecurity for businesses. It offers a range of features to help organizations understand, unlock, and uncover security threats, including security reports, databreach reports, logs, and threat hunting. With CYBER AI, businesses can gain a comprehensive view of their security posture and take proactive steps to mitigate risks.
Nametag
Nametag is an identity verification solution designed specifically for IT helpdesks. It helps businesses prevent social engineering attacks, account takeovers, and data breaches by verifying the identity of users at critical moments, such as password resets, MFA resets, and high-risk transactions. Nametag's unique approach to identity verification combines mobile cryptography, device telemetry, and proprietary AI models to provide unmatched security and better user experiences.
hCaptcha Enterprise
hCaptcha Enterprise is a comprehensive security platform that protects businesses from a wide range of online threats, including bots, fraud, and abuse. It uses advanced machine learning and threat intelligence to detect and block malicious activity, while providing a frictionless experience for legitimate users. hCaptcha Enterprise is easy to deploy and manage, and it can be customized to meet the specific needs of each business.
Cyguru
Cyguru is an all-in-one cloud-based AI Security Operation Center (SOC) that offers a comprehensive range of features for a robust and secure digital landscape. Its Security Operation Center is the cornerstone of its service domain, providing AI-Powered Attack Detection, Continuous Monitoring for Vulnerabilities and Misconfigurations, Compliance Assurance, SecPedia: Your Cybersecurity Knowledge Hub, and Advanced ML & AI Detection. Cyguru's AI-Powered Analyst promptly alerts users to any suspicious behavior or activity that demands attention, ensuring timely delivery of notifications. The platform is accessible to everyone, with up to three free servers and subsequent pricing that is more than 85% below the industry average.
Japan Computer Vision (JCV)
Japan Computer Vision (JCV) is a leading technology company specializing in advanced computer vision solutions (image recognition). As a 100% subsidiary of SoftBank Corp., JCV focuses on security and innovation to provide cutting-edge technologies that transform industries and improve lives worldwide. Through solutions for smart buildings and smart retail, JCV enhances office environments, streamlines operations, improves hospitality in stores and commercial facilities, and creates new work and lifestyle experiences.
EchoMark
EchoMark is a cloud-based data leak prevention solution that uses invisible forensic watermarks to protect sensitive information from unauthorized access and exfiltration. It allows organizations to securely share and collaborate on documents and emails without compromising privacy and security. EchoMark's advanced investigation tools can trace the source of a leaked document or email, even if it has been shared via printout or photo.
Vanta
Vanta is a trust management platform that helps businesses automate compliance, streamline security reviews, and build trust with customers. It offers a range of features to help businesses manage risk and prove security in real time, including: * **Compliance automation:** Vanta automates up to 90% of the work for security and privacy frameworks, making it easy for businesses to achieve and maintain compliance. * **Real-time monitoring:** Vanta provides real-time visibility into the state of a business's security posture, with hourly tests and alerts for any issues. * **Holistic risk visibility:** Vanta offers a single view across key risk surfaces in a business, including employees, assets, and vendors, to help businesses identify and mitigate risks. * **Efficient audits:** Vanta streamlines the audit process, making it easier for businesses to prepare for and complete audits. * **Integrations:** Vanta integrates with a range of tools and platforms to help businesses automate security and compliance tasks.
Verificient
Verificient Technologies Inc specializes in biometrics, computer vision, and machine learning to deliver world-class solutions in continuous identity verification and remote monitoring. Their flagship product, Proctortrack, is an identity verification and automated digital remote proctoring solution, helping Institutions of higher education ensure the integrity of their high-stakes online assessments.
Tracecat
Tracecat is an open-source security automation platform that helps you automate security alerts, build AI-assisted workflows, orchestrate alerts, and close cases fast. It is a Tines / Splunk SOAR alternative that is built for builders and allows you to experiment for free. You can deploy Tracecat on your own infrastructure or use Tracecat Cloud with no maintenance overhead. Tracecat is Apache-2.0 licensed, which means it is open vision, open community, and open development. You can have your say in the future of security automation. Tracecat is no-code first, but you can also code as well. You can build automations fast with no-code and customize without vendor lock-in using Python. Tracecat has a click-and-drag workflow builder that allows you to automate SecOps using pre-built actions (API calls, webhooks, data transforms, AI tasks, and more) combined into workflows. No code is required. Tracecat also has a built-in case management system that allows you to open cases directly from workflows and track and manage security incidents all in one platform.
Drata
Drata is a security and compliance automation platform that continuously monitors and collects evidence of a company's security controls, while streamlining workflows to ensure audit-readiness. It automates evidence collection, control monitoring, and risk management, saving companies time and resources. Drata also provides a centralized platform for managing compliance across multiple frameworks, including SOC 2, ISO 27001, HIPAA, and GDPR.
Dataminr
Dataminr is a leading provider of real-time event and risk detection. Its AI platform processes billions of public data units daily to deliver real-time alerts on high-impact events and emerging risks. Dataminr's products are used by businesses, public sector organizations, and newsrooms to plan for and respond to crises, manage risks, and stay informed about the latest events.
Robust Intelligence
Robust Intelligence is an end-to-end solution for securing AI applications. It automates the evaluation of AI models, data, and files for security and safety vulnerabilities and provides guardrails for AI applications in production against integrity, privacy, abuse, and availability violations. Robust Intelligence helps enterprises remove AI security blockers, save time and resources, meet AI safety and security standards, align AI security across stakeholders, and protect against evolving threats.
Netify
Netify provides network intelligence and visibility. Its solution stack starts with a Deep Packet Inspection (DPI) engine that passively collects data on the local network. This lightweight engine identifies applications, protocols, hostnames, encryption ciphers, and other network attributes. The software can be integrated into network devices for traffic identification, firewalling, QoS, and cybersecurity. Netify's Informatics engine collects data from local DPI engines and uses the power of a public or private cloud to transform it into network intelligence. From device identification to cybersecurity risk detection, Informatics provides a way to take a proactive approach to manage network threats, bottlenecks, and usage. Lastly, Netify's Data Feeds provide data to help vendors understand how applications behave on the Internet.
Signal
Signal is an encrypted messaging service that allows users to send and receive text, voice, video, and image messages. It is available as a mobile app and a desktop application, and it can be used to communicate with other Signal users or with people who use other messaging apps. Signal is known for its strong security features, which include end-to-end encryption, disappearing messages, and a focus on privacy.
ZeroThreat
ZeroThreat is a web app and API security scanner that helps businesses identify and fix vulnerabilities in their web applications and APIs. It uses a combination of static and dynamic analysis techniques to scan for a wide range of vulnerabilities, including OWASP Top 10, CWE Top 25, and SANS Top 25. ZeroThreat also provides continuous monitoring and alerting, so businesses can stay on top of new vulnerabilities as they emerge.
Instafill.ai
Instafill.ai is a website that provides a security service to protect itself from online attacks. It uses a variety of techniques to detect and block malicious traffic, including IP blocking, web application firewall, and bot detection. Instafill.ai also provides a variety of security features, such as two-factor authentication, SSL encryption, and malware scanning.
Prompt Security
Prompt Security is a platform that secures all uses of Generative AI in the organization: from tools used by your employees to your customer-facing apps.
HCLSoftware
HCLSoftware is a leading provider of software solutions for digital transformation, data and analytics, AI and intelligent automation, enterprise security, and cloud computing. The company's products and services help organizations of all sizes to improve their business outcomes and achieve their digital transformation goals.
Robust Intelligence
Robust Intelligence is an end-to-end security solution for AI applications. It automates the evaluation of AI models, data, and files for security and safety vulnerabilities and provides guardrails for AI applications in production against integrity, privacy, abuse, and availability violations. Robust Intelligence helps enterprises remove AI security blockers, save time and resources, meet AI safety and security standards, align AI security across stakeholders, and protect against evolving threats.
Dataminr
Dataminr is a leading AI company that provides real-time event, risk, and threat detection. Its revolutionary real-time AI Platform discovers the earliest signals of events, risks, and threats from within public data. Dataminr's products deliver critical information first—so organizations can respond quickly and manage crises effectively.
Redflag AI
Redflag AI is a leading provider of content and brand protection solutions. Our AI-powered platform helps businesses protect their brands from fraud, abuse, and counterfeiting. We offer a range of services to help businesses protect their online presence, including brand monitoring, content moderation, and fraud detection.
SafeSpeak
SafeSpeak is an AI-powered mobile security solution that protects users from phone scams, SIM swaps, and other malicious activities. It uses advanced machine learning and large language models to detect and block threats in real-time. SafeSpeak offers a range of features for both personal and business use, including malicious behavior detection, community immunity, SIM swap detection, weekly and monthly reporting, quick and easy setup, admin dashboard, extensible API, custom reporting, and visibility into tactics, techniques, and procedures (TTPs).
PullRequest
PullRequest is an AI-powered code review as a service platform that offers on-demand code review from expert engineers enhanced by AI. It supports all languages and frameworks, helping development teams of any size ship better, more secure code faster through AI-assisted code reviews. PullRequest integrates with popular version control platforms like GitHub, GitLab, Bitbucket, and Azure DevOps, providing valuable knowledge sharing with senior engineers to improve code quality and security. The platform ensures code safety and security by adhering to best practices, strict procedures, and employing reviewers based in the US, the UK, or Canada.
MiniAiLive
MiniAiLive is a provider of Touchless Biometrics Authentication and ID verification solutions. They offer strong security solutions with cutting-edge technologies for facial recognition, liveness detection, and ID document recognition. MiniAiLive ensures seamless integration with clients' existing systems. The application caters to various industries and provides solutions for identity verification, biometric authentication, and fraud prevention. MiniAiLive stands out for its global coverage, configurability, speed, and accuracy in identity verification services.
AppSec Assistant
AppSec Assistant is an AI-powered application designed to provide automated security recommendations in Jira Cloud. It focuses on ensuring data security by enabling secure-by-design software development. The tool simplifies setup by allowing users to add their OpenAI API key and organization, encrypts and stores data using Atlassian's Storage API, and provides tailored security recommendations for each ticket to reduce manual AppSec reviews. AppSec Assistant empowers developers by keeping up with their pace and helps in easing the security review bottleneck.
Pipeless Agents
Pipeless Agents is a platform that allows users to convert any video feed into an actionable data stream, enabling automation of tasks based on visual inputs. It serves as a serverless platform for Vision AI, offering the ability to create projects, connect video sources, and customize agents for specific needs. With a focus on simplicity and efficiency, Pipeless Agents empowers users to extract structured data from various video sources and automate processes with minimal coding requirements.
KBY-AI Identity Verification SDK
KBY-AI is an advanced Identity Verification SDK provider offering powerful solutions for Face Recognition, Face Liveness Detection, and ID Card Recognition. Their cutting-edge AI technology ensures foolproof protection without disrupting the user's flow. The SDKs are designed to be lightweight, highly effective, and ideal for commercial applications like KYC automation, time and attendance systems, and video surveillance. KBY-AI's solutions support various ID documents from 200+ countries and are compatible with Android, iOS, and web platforms.
Nudify.me
Nudify.me is an AI-powered application that utilizes DeepNude technology to generate nudified images from uploaded photos. The app offers a simple and secure way to view individuals in the nude by predicting their appearance with high accuracy. Users can upload photos, select a generation mode, and receive the nudified result within seconds. Nudify.me also provides options for privacy settings and profit-sharing from public galleries. The application offers transparent pricing plans tailored to different user needs, with no hidden fees or long-term contracts.
Endor Labs
Endor Labs is an AI-powered software supply chain security solution that helps organizations manage their software bills of materials (SBOM), secure their open source dependencies, optimize CI/CD pipeline security, and enhance application security with secret detection. The platform offers advanced features such as AI-assisted OSS selection, compliance management, reachability-based SCA, and repository security posture management. Endor Labs aims to streamline security processes, reduce false positives, and provide actionable insights to improve software supply chain security.
MTS AI
MTS AI is a platform offering AI-based products and solutions, leveraging artificial intelligence technologies to create voice assistants, chatbots, video analysis solutions, and more. They develop AI solutions using natural language processing, computer vision, and edge computing technologies, collaborating with leading tech companies and global experts. MTS AI aims to find the most viable AI applications for the benefit of society, providing automation for customer service systems, security control, and voice and video data analysis.
Visionify.ai
Visionify.ai is an advanced Vision AI application designed to enhance workplace safety and compliance through AI-driven surveillance. The platform offers over 60 Vision AI scenarios for hazard warnings, worker health, compliance policies, environment monitoring, vehicle monitoring, and suspicious activity detection. Visionify.ai empowers EHS professionals with continuous monitoring, real-time alerts, proactive hazard identification, and privacy-focused data security measures. The application transforms ordinary cameras into vigilant protectors, providing instant alerts and video analytics tailored to safety needs.
FacePlugin
FacePlugin is an ID verification and Biometric Authentication solution provider that utilizes advanced face recognition, face liveness detection, and ID document recognition technologies. The platform offers solutions for eKYC and ID verification needs, with features such as instant face recognition, enhanced face anti-spoofing technology, and robust identity document verification. FacePlugin aims to secure and streamline the authentication process for various industries and use cases, providing proprietary solutions, top-notch quality, and competitive pricing.
Lakera
Lakera is the world's most advanced AI security platform designed to protect organizations from AI threats. It offers solutions for prompt injection detection, unsafe content identification, PII and data loss prevention, data poisoning prevention, and insecure LLM plugin design. Lakera is recognized for setting global AI security standards and is trusted by leading enterprises, foundation model providers, and startups. The platform is powered by a proprietary AI threat database and aligns with global AI security frameworks.
Mxface
Mxface is a leading face recognition API technology that offers advanced computer vision and AI APIs for developers. The platform provides services like face detection, face comparing, face landmarks, face attributes, face search, iris recognition, fingerprint recognition, and people detection. Mxface ensures data security, real-time face recognition, precision, easy face enrollment, and device integration. It is a cloud-based facial recognition solution that supports various use cases and offers comprehensive security features.
Airship AI
Airship AI is a cutting-edge, artificial intelligence-driven video, sensor, and data management surveillance platform. Customers rely on their services to provide actionable intelligence in real-time, collected from a wide range of deployed sensors, utilizing the latest in edge and cloud-based analytics. These capabilities improve public safety and operational efficiency for both public sector and commercial clients. Founded in 2006, Airship AI is U.S. owned and operated, headquartered in Redmond, Washington. Airship's product suite is comprised of three core offerings: Acropolis, the enterprise software stack, Command, the family of viewing clients, and Outpost, edge hardware and software AI offerings.
Rank One Computing
Rank One Computing (ROC) is an American-made provider of multimodal biometrics and computer vision solutions, specializing in face recognition, fingerprint recognition, and artificial intelligence technologies. Trusted by the U.S. military, law enforcement, and leading FinTech brands, ROC offers top-ranked software for identity proofing and threat detection. Their suite of products includes ROC SDK, ROC Watch, and custom enterprise AI development services. With a focus on security and efficiency, ROC aims to make the world safer and more convenient through unbiased and privacy-conscious applications.
Allwire Technologies
Allwire Technologies, LLC is a boutique IT consultancy firm that specializes in building intelligent IT infrastructure solutions. They offer services such as hybrid infrastructure management, security expertise, IT helpdesk support, operational insurance, and AI-driven solutions. The company focuses on empowering clients by providing tailored IT solutions without vendor lock-in. Allwire Technologies is known for fixing complex IT problems and modernizing existing tech stacks through a combination of cloud and data center solutions.
FaceCheck.ID
FaceCheck.ID is a facial recognition AI technology-powered search engine that allows users to upload a photo of a person to discover their social media profiles, appearances in blogs, videos, news websites, and more. It helps users verify the authenticity of individuals, avoid dangerous criminals, keep their families safe, and avoid becoming victims of various scams and crimes. The tool is designed to assist in identifying and uncovering information about individuals based on their facial features, with a focus on safety and security.
Wing Security
Wing Security is a SaaS Security Posture Management (SSPM) solution that helps businesses protect their data by providing full visibility and control over applications, users, and data. The platform offers features such as automated remediation, AI discovery, real-time SaaS visibility, vendor risk management, insider risk management, and more. Wing Security enables organizations to eliminate risky applications, manage user behavior, and protect sensitive data from unauthorized access. With a focus on security first, Wing Security helps businesses leverage the benefits of SaaS while staying protected.
NodeZero™ Platform
Horizon3.ai Solutions offers the NodeZero™ Platform, an AI-powered autonomous penetration testing tool designed to enhance cybersecurity measures. The platform combines expert human analysis by Offensive Security Certified Professionals with automated testing capabilities to streamline compliance processes and proactively identify vulnerabilities. NodeZero empowers organizations to continuously assess their security posture, prioritize fixes, and verify the effectiveness of remediation efforts. With features like internal and external pentesting, rapid response capabilities, AD password audits, phishing impact testing, and attack research, NodeZero is a comprehensive solution for large organizations, ITOps, SecOps, security teams, pentesters, and MSSPs. The platform provides real-time reporting, integrates with existing security tools, reduces operational costs, and helps organizations make data-driven security decisions.
Recognito
Recognito is a leading facial recognition technology provider, offering the NIST FRVT Top 1 Face Recognition Algorithm. Their high-performance biometric technology is used by police forces and security services to enhance public safety, manage individual movements, and improve audience analytics for businesses. Recognito's software goes beyond object detection to provide detailed user role descriptions and develop user flows. The application enables rapid face and body attribute recognition, video analytics, and artificial intelligence analysis. With a focus on security, living, and business improvements, Recognito helps create safer and more prosperous cities.
Vectra AI
Vectra AI is a leading AI security platform that helps organizations stop advanced cyber attacks by providing an integrated signal for extended detection and response (XDR). The platform arms security analysts with real-time intelligence to detect, prioritize, investigate, and respond to threats across network, identity, cloud, and managed services. Vectra AI's AI-driven detections and Attack Signal Intelligence enable organizations to protect against various attack types and emerging threats, enhancing cyber resilience and reducing risks in critical infrastructure, cloud environments, and remote workforce scenarios. Trusted by over 1100 enterprises worldwide, Vectra AI is recognized for its expertise in AI security and its ability to stop sophisticated attacks that other technologies may miss.
ISMS Copilot
ISMS Copilot is an AI-powered assistant designed to simplify ISO 27001 preparation for both experts and beginners. It offers various features such as ISMS scope definition, risk assessment and treatment, compliance navigation, incident management, business continuity planning, performance tracking, and more. The tool aims to save time, provide precise guidance, and ensure ISO 27001 compliance. With a focus on security and confidentiality, ISMS Copilot is a valuable resource for small businesses and information security professionals.
Sardine
Sardine is an AI-powered platform for fraud prevention and compliance. It offers a comprehensive suite of products to help banks, retailers, and fintechs detect fraud patterns, prevent money laundering, and stop sophisticated scams. Sardine combines deep device intelligence, behavior biometrics, and identity signals to provide a precise risk score for every customer interaction. The platform also features machine learning models, a rules engine, network graph analysis, anomaly detection, and generative AI capabilities to fight modern threats. Sardine helps reduce fraud rates, decrease false positives, and streamline risk operations with its fully integrated solutions.
SecureLabs
SecureLabs is an AI-powered platform that offers comprehensive security, privacy, and compliance management solutions for businesses. The platform integrates cutting-edge AI technology to provide continuous monitoring, incident response, risk mitigation, and compliance services. SecureLabs helps organizations stay current and compliant with major regulations such as HIPAA, GDPR, CCPA, and more. By leveraging AI agents, SecureLabs offers autonomous aids that tirelessly safeguard accounts, data, and compliance down to the account level. The platform aims to help businesses combat threats in an era of talent shortages while keeping costs down.
WP Safe AI
WP Safe AI is a cutting-edge Security as a Service (SaaS) solution powered by AI, designed to effortlessly secure compromised WordPress websites. The platform guarantees a fast, thorough cleanup verified by experts, with zero stress for the user. It combines the power of AI with expert verification to handle most cleanup tasks automatically, streamlining routine tasks with exceptional accuracy and efficiency. WP Safe AI offers a secure staging environment for users to review their cleaned site before deployment, ensuring a hassle-free experience. The application goes beyond simple scanning and removal, addressing deep-seated malware roots for a complete and lasting solution.
GitLab
GitLab is a comprehensive AI-powered DevSecOps platform that balances speed and security in a single platform. It automates software delivery, boosts productivity, and secures the end-to-end software supply chain. GitLab simplifies the toolchain by providing all essential DevSecOps tools in one place, accelerates software delivery through automation and AI-powered workflows, and integrates security seamlessly. It allows users to deploy anywhere without cloud vendor lock-in, offering value stream management, analytics, and insights to accelerate coding. GitLab is trusted by industry leaders for building mission-critical software and is recognized as a Leader in DevOps Platforms by various industry analysts.
Snyk
Snyk is a developer security platform powered by DeepCode AI, offering solutions for application security, software supply chain security, and secure AI-generated code. It provides comprehensive vulnerability data, license compliance management, and self-service security education. Snyk integrates AI models trained on security-specific data to secure applications and manage tech debt effectively. The platform ensures developer-first security with one-click security fixes and AI-powered recommendations, enhancing productivity while maintaining security standards.
SparkCognition Government Systems
SparkCognition Government Systems (SGS) is a full-spectrum artificial intelligence company dedicated to government and national defense missions. The company leverages AI technologies such as machine learning, natural language processing, and computer vision to enhance mission readiness, battle management, logistics, security, and manufacturing optimization. SparkCognition Government Systems focuses on delivering targeted AI solutions to amplify asset readiness, augment human intelligence, and accelerate decision-making processes for government organizations.
Vulnscanner AI
Vulnscanner AI is an AI-powered WordPress security tool that offers affordable and user-friendly website security solutions. It provides instant, jargon-free security reports, step-by-step resolution guides, and customizable security solutions to prevent future attacks. The tool is designed to help small/medium businesses, web professionals, and individuals safeguard their online presence without breaking the bank. With advanced algorithms and military-grade encryption, Vulnscanner AI aims to protect websites from cyber threats and vulnerabilities.
Dynatrace
Dynatrace is a modern cloud platform that offers unified observability and security solutions to simplify cloud complexity and drive innovation. Powered by causal AI, Dynatrace provides analytics and automation capabilities to help businesses monitor and secure their full stack, solve digital challenges, and make better business decisions in real-time. Trusted by thousands of global brands, Dynatrace empowers teams to deliver flawless digital experiences, drive intelligent cloud ecosystem automations, and solve any use-case with custom solutions.
Storytell.ai
Storytell.ai is an enterprise-grade AI platform that offers Business-Grade Intelligence across data, focusing on boosting productivity for employees and teams. It provides a secure environment with features like creating project spaces, multi-LLM chat, task automation, chat with company data, and enterprise-AI security suite. Storytell.ai ensures data security through end-to-end encryption, data encryption at rest, provenance chain tracking, and AI firewall. It is committed to making AI safe and trustworthy by not training LLMs with user data and providing audit logs for accountability. The platform continuously monitors and updates security protocols to stay ahead of potential threats.
Traceable
Traceable is an AI-driven application designed to enhance API security for Cloud-Native Apps. It collects API traffic across the application landscape and utilizes advanced context-based behavioral analytics AI engine to provide insights on APIs, data exposure, threat analytics, and forensics. The platform offers features for API cataloging, activity monitoring, endpoint details, ownership, vulnerabilities, protection against security events, testing, analytics, and more. Traceable also allows for role-based access control, policy configuration, data classification, and integration with third-party solutions for data collection and security. It is a comprehensive tool for API security and threat detection in modern cloud environments.
Sighthound
Sighthound is an AI-powered video solutions provider that specializes in solving complex video AI problems at scale. Their products, such as Sighthound ALPR+ for Automatic License Plate Recognition and Sighthound Redactor for Video Redaction, leverage deep learning technology to unlock valuable user insights, reduce operational costs, and increase revenue in the privacy and vehicle recognition space. With a focus on simplicity and customer support, Sighthound offers easy integration of their AI products through simple-to-use APIs.
VisionLabs
VisionLabs is a leading provider of facial recognition technology that enhances digital identity experiences. Their Artificial Intelligence and Machine Learning technology, based on neural network algorithms, ensures a safer and more secure world, enabling seamless navigation in the digital realm. With applications in over 60 countries across various industries, VisionLabs aims to facilitate better and safer interactions through facial recognition technology.
Coalition for Secure AI (CoSAI)
The Coalition for Secure AI (CoSAI) is an open ecosystem of AI and security experts dedicated to sharing best practices for secure AI deployment and collaborating on AI security research and product development. It aims to foster a collaborative ecosystem of diverse stakeholders to invest in AI security research collectively, share security expertise and best practices, and build technical open-source solutions for secure AI development and deployment.
Traceable
Traceable is an intelligent API security platform designed for enterprise-scale security. It offers unmatched API discovery, attack detection, threat hunting, and infinite scalability. The platform provides comprehensive protection against API attacks, fraud, and bot security, along with API testing capabilities. Powered by Traceable's OmniTrace Engine, it ensures unparalleled security outcomes, remediation, and pre-production testing. Security teams trust Traceable for its speed and effectiveness in protecting API infrastructures.
SD Times
The website is a comprehensive platform for software development news, covering a wide range of topics such as AI, DevOps, Observability, CI/CD, Cloud Native, Data, Test Automation, Mobile, API, Performance, Security, DevSecOps, Enterprise Security, Supply Chain Security, Teams & Culture, Dev Manager, Agile, Value Stream, Productivity, and more. It provides news articles, webinars, podcasts, and white papers to keep developers informed about the latest trends and technologies in the software development industry.
Intuition Machines
Intuition Machines is a leading provider of Privacy-Preserving AI/ML platforms and research solutions. They offer products and services that cater to category leaders worldwide, focusing on AI/ML research, security, and risk analysis. Their innovative solutions help enterprises prepare for the future by leveraging AI for a wide range of problems. With a strong emphasis on privacy and security, Intuition Machines is at the forefront of developing cutting-edge AI technologies.
Spottr
Spottr is an advanced AI-powered video search tool that revolutionizes content navigation by enabling users to find specific moments in vast video archives within seconds. With sophisticated algorithms and natural language processing, Spottr offers context-aware search results and infinite video length handling capabilities. The application is ideal for various industries such as investigation, wildlife monitoring, video production, and more. Spottr eliminates the need for endless scrolling through footage, making it a valuable tool for both small businesses and large enterprises.
Socure
Socure is a revolutionary digital identity verification and fraud prevention platform that leverages advanced AI/ML technology to provide the most accurate and comprehensive identity verification and fraud prediction solutions. The platform offers a wide range of features including graph-defined identity verification, fraud risk assessment, compliance solutions, account intelligence, decisioning analytics, and reporting. Socure's ID+ platform integrates real-time intelligence from billions of predictions and outcomes to deliver maximum accuracy and eliminate the need for disparate products. With up to 98% auto-approvals across all demographics, Socure helps organizations prevent fraud, streamline compliance, and onboard good customers efficiently.
Glog
Glog is an AI application focused on making software more secure by providing remediation advice for security vulnerabilities in software code based on context. It is capable of automatically fixing vulnerabilities, thus reducing security risks and protecting against cyber attacks. The platform utilizes machine learning and AI to enhance software security and agility, ensuring system reliability, integrity, and safety.
Outsight
Outsight is an AI application that utilizes LiDAR technology to provide end-to-end passenger journey tracking, enhance airport operations, improve security solutions, and transform various industries. The application offers high-accuracy, all-weather monitoring, reduces false alarms, and enhances perimeter and access control. Outsight collaborates with industry leaders to deliver unprecedented solutions in the field of Spatial AI, making spaces truly smart and revolutionizing the way we perceive reality.
Stellar Cyber
Stellar Cyber is an AI-driven unified security operations platform powered by Open XDR. It offers a single platform with NG-SIEM, NDR, and Open XDR, providing security capabilities to take control of security operations. The platform helps organizations detect, correlate, and respond to threats fast using AI technology. Stellar Cyber is designed to protect the entire attack surface, improve security operations performance, and reduce costs while simplifying security operations.
Chima
Chima is an AI tool that is revolutionizing the enterprise landscape by offering Complex Human Reasoning Systems powered by AI. It automates various functions, enhances customer targeting, and improves business operations. Chima ensures industry-grade security and compliance, making it a reliable choice for enterprises looking to leverage AI for growth and efficiency.
Dropzone AI
Dropzone AI is an award-winning AI application designed to reinforce Security Operations Centers (SOCs) by providing autonomous AI analysts. It replicates the techniques of elite analysts to autonomously investigate alerts, covering various use cases such as phishing, endpoint, network, cloud, identity, and insider threats. The application offers pre-trained AI agents that work alongside human analysts, automating investigation tasks and providing fast, detailed, and accurate reports. With built-in integrations with major security tools, Dropzone AI aims to reduce Mean Time to Respond (MTTR) and allow analysts to focus on addressing real threats.
n8n
n8n is a powerful workflow automation software and tools that offer advanced AI capabilities. It is a popular platform for technical teams to automate workflows, integrate various services, and build autonomous agents. With over 400 integrations, n8n enables users to save time, streamline operations, and enhance security through AI-driven processes. The tool supports self-hosting, external libraries, and offers enterprise-ready solutions for scaling operations. n8n empowers users to code iteratively, explore advanced AI features, and create complex workflows with ease.
n8n
n8n is a powerful workflow automation software and tool that offers advanced AI capabilities. It is a popular platform for technical teams to automate workflows, integrate various services, and build autonomous agents. With over 400 integrations, n8n enables users to save time, streamline operations, and enhance security through AI-powered solutions. The tool supports self-hosting, external libraries, and a user-friendly interface for both coding and non-coding users.
Start Left® Security
Start Left® Security is an AI-driven application security posture management platform that empowers product teams to automate secure-by-design software from people to cloud. The platform integrates security into every facet of the organization, offering a unified solution that aligns with business goals, fosters continuous improvement, and drives innovation. Start Left® Security provides a gamified DevSecOps experience with comprehensive security capabilities like SCA, SBOM, SAST, DAST, Container Security, IaC security, ASPM, and more.
ArcadianAI
ArcadianAI is a modern security monitoring platform that offers easy and affordable solutions for businesses and individuals. The platform provides security cameras, crime maps, and a 30-day free trial for users to experience its features. ArcadianAI uses AI technology for intrusion detection, smart alerts analytics, AI heatmaps search, and AI detection of people. The platform aims to enhance security measures by intelligently contextualizing, analyzing, and safeguarding premises in real-time using existing CCTV footage.
Seventh Sense
Seventh Sense is an AI company focused on providing cutting-edge AI solutions for secure and private identity verification. Their innovative technologies, such as SenseCrypt, OpenCV FR, and SenseVantage, offer advanced biometric verification, face recognition, and AI video analysis. With a mission to make self-sovereign identity accessible to all, Seventh Sense ensures privacy, security, and compliance through their AI algorithms and cryptographic solutions.
VOLT AI
VOLT AI is a cloud-based enterprise security application that utilizes advanced AI technology to intercept threats in real-time. The application offers solutions for various industries such as education, corporate, and cities, focusing on perimeter security, medical emergencies, and weapons detection. VOLT AI provides features like unified cameras, video intelligence, real-time notifications, automated escalations, and digital twin creation for advanced situational awareness. The application aims to enhance safety and security by detecting security risks and notifying users promptly.
AquilaX
AquilaX is an AI-powered DevSecOps platform that simplifies security and accelerates development processes. It offers a comprehensive suite of security scanning tools, including secret identification, PII scanning, SAST, container scanning, and more. AquilaX is designed to integrate seamlessly into the development workflow, providing fast and accurate results by leveraging AI models trained on extensive datasets. The platform prioritizes developer experience by eliminating noise and false positives, making it a go-to choice for modern Secure-SDLC teams worldwide.
AITX - Artificial Intelligence Technology Solutions Inc.
AITX - Artificial Intelligence Technology Solutions Inc. is a leading company at the forefront of the 4th Industrial Revolution, specializing in deploying Autonomous Intelligent Response (AIR™) technology. They design, engineer, manufacture, and maintain innovative AI-powered solutions for security and facility management, aiming to enhance security, safety, and efficiency in various sectors. AITX's subsidiaries develop cutting-edge robotics and AI technology to revolutionize workflow automation, security solutions, and more, offering cost-effective and advanced alternatives to traditional methods.
CyberUpgrade
CyberUpgrade.net is an AI-powered platform that offers comprehensive cybersecurity and compliance solutions for organizations of all sizes. It provides automated compliance, risk management, vendor risk assessment, policy management, audit management, and 24/7 security support. The platform features a cloud vulnerability scanner, security awareness training, pentesting, business continuity planning, disaster recovery planning, and an AI-powered assistant for seamless security support. CyberUpgrade helps CTOs understand their organization's security status, proposes improvement plans, guides execution, and prepares compliance documentation with a push of a button. It engages every employee individually for evidence collection and situation analysis, ensuring real cybersecurity measures are in place.
Coram AI
Coram AI is a modern business video security platform that offers AI-powered solutions for various industries such as warehouse, manufacturing, healthcare, education, and more. It provides advanced features like gun detection, productivity alerts, facial recognition, and safety alerts to enhance security and operations. Coram AI's flexible architecture allows users to seamlessly integrate with any IP camera and scale effortlessly to meet their demands. With natural language search capabilities, users can quickly find relevant footage and improve decision-making. Trusted by local businesses and Fortune 500 companies, Coram AI delivers real business value through innovative AI tools and reliable customer support.
Kindo
Kindo is an AI-powered platform designed for DevSecOps teams to automate tasks, write doctrine, and orchestrate infrastructure responses. It offers AI-powered Runbook automations to streamline workflows, automate tedious tasks, and enhance security controls. Kindo enables users to offload time-consuming tasks to AI Agents, prioritize critical tasks, and monitor AI-related activities for compliance and informed decision-making. The platform provides a comprehensive vantage point for modern infrastructure defense and instrumentation, allowing users to create repeatable processes, automate vulnerability assessment and remediation, and secure multi-cloud IAM configurations.
72 - Open Source Tools
PyRIT
PyRIT is an open access automation framework designed to empower security professionals and ML engineers to red team foundation models and their applications. It automates AI Red Teaming tasks to allow operators to focus on more complicated and time-consuming tasks and can also identify security harms such as misuse (e.g., malware generation, jailbreaking), and privacy harms (e.g., identity theft). The goal is to allow researchers to have a baseline of how well their model and entire inference pipeline is doing against different harm categories and to be able to compare that baseline to future iterations of their model. This allows them to have empirical data on how well their model is doing today, and detect any degradation of performance based on future improvements.
Copilot-For-Security
Microsoft Copilot for Security is a generative AI-powered assistant for daily operations in security and IT that empowers teams to protect at the speed and scale of AI.
tracecat
Tracecat is an open-source automation platform for security teams. It's designed to be simple but powerful, with a focus on AI features and a practitioner-obsessed UI/UX. Tracecat can be used to automate a variety of tasks, including phishing email investigation, evidence collection, and remediation plan generation.
frigate
Frigate is a complete and local NVR designed for Home Assistant with AI object detection. It uses OpenCV and Tensorflow to perform realtime object detection locally for IP cameras. Use of a Google Coral Accelerator is optional, but highly recommended. The Coral will outperform even the best CPUs and can process 100+ FPS with very little overhead.
AIL-framework
AIL framework is a modular framework to analyze potential information leaks from unstructured data sources like pastes from Pastebin or similar services or unstructured data streams. AIL framework is flexible and can be extended to support other functionalities to mine or process sensitive information (e.g. data leak prevention).
ps-fuzz
The Prompt Fuzzer is an open-source tool that helps you assess the security of your GenAI application's system prompt against various dynamic LLM-based attacks. It provides a security evaluation based on the outcome of these attack simulations, enabling you to strengthen your system prompt as needed. The Prompt Fuzzer dynamically tailors its tests to your application's unique configuration and domain. The Fuzzer also includes a Playground chat interface, giving you the chance to iteratively improve your system prompt, hardening it against a wide spectrum of generative AI attacks.
AirGo
AirGo is a front and rear end separation, multi user, multi protocol proxy service management system, simple and easy to use. It supports vless, vmess, shadowsocks, and hysteria2.
beelzebub
Beelzebub is an advanced honeypot framework designed to provide a highly secure environment for detecting and analyzing cyber attacks. It offers a low code approach for easy implementation and utilizes virtualization techniques powered by OpenAI Generative Pre-trained Transformer. Key features include OpenAI Generative Pre-trained Transformer acting as Linux virtualization, SSH Honeypot, HTTP Honeypot, TCP Honeypot, Prometheus openmetrics integration, Docker integration, RabbitMQ integration, and kubernetes support. Beelzebub allows easy configuration for different services and ports, enabling users to create custom honeypot scenarios. The roadmap includes developing Beelzebub into a robust PaaS platform. The project welcomes contributions and encourages adherence to the Code of Conduct for a supportive and respectful community.
rlhf_trojan_competition
This competition is organized by Javier Rando and Florian Tramèr from the ETH AI Center and SPY Lab at ETH Zurich. The goal of the competition is to create a method that can detect universal backdoors in aligned language models. A universal backdoor is a secret suffix that, when appended to any prompt, enables the model to answer harmful instructions. The competition provides a set of poisoned generation models, a reward model that measures how safe a completion is, and a dataset with prompts to run experiments. Participants are encouraged to use novel methods for red-teaming, automated approaches with low human oversight, and interpretability tools to find the trojans. The best submissions will be offered the chance to present their work at an event during the SaTML 2024 conference and may be invited to co-author a publication summarizing the competition results.
hackingBuddyGPT
hackingBuddyGPT is a framework for testing LLM-based agents for security testing. It aims to create common ground truth by creating common security testbeds and benchmarks, evaluating multiple LLMs and techniques against those, and publishing prototypes and findings as open-source/open-access reports. The initial focus is on evaluating the efficiency of LLMs for Linux privilege escalation attacks, but the framework is being expanded to evaluate the use of LLMs for web penetration-testing and web API testing. hackingBuddyGPT is released as open-source to level the playing field for blue teams against APTs that have access to more sophisticated resources.
aide
AIDE (Advanced Intrusion Detection Environment) is a tool for monitoring file system changes. It can be used to detect unauthorized changes to monitored files and directories. AIDE was written to be a simple and free alternative to Tripwire. Features currently included in AIDE are as follows: o File attributes monitored: permissions, inode, user, group file size, mtime, atime, ctime, links and growing size. o Checksums and hashes supported: SHA1, MD5, RMD160, and TIGER. CRC32, HAVAL and GOST if Mhash support is compiled in. o Plain text configuration files and database for simplicity. o Rules, variables and macros that can be customized to local site or system policies. o Powerful regular expression support to selectively include or exclude files and directories to be monitored. o gzip database compression if zlib support is compiled in. o Free software licensed under the GNU General Public License v2.
aio-proxy
This script automates setting up TUIC, hysteria and other proxy-related tools in Linux. It features setting domains, getting SSL certification, setting up a simple web page, SmartSNI by Bepass, Chisel Tunnel, Hysteria V2, Tuic, Hiddify Reality Scanner, SSH, Telegram Proxy, Reverse TLS Tunnel, different panels, installing, disabling, and enabling Warp, Sing Box 4-in-1 script, showing ports in use and their corresponding processes, and an Android script to use Chisel tunnel.
uuWAF
uuWAF is an industrial-grade, free, high-performance, highly extensible web application and API security protection product that supports AI and semantic engines.
llm-guard
LLM Guard is a comprehensive tool designed to fortify the security of Large Language Models (LLMs). It offers sanitization, detection of harmful language, prevention of data leakage, and resistance against prompt injection attacks, ensuring that your interactions with LLMs remain safe and secure.
awesome-gpt-security
Awesome GPT + Security is a curated list of awesome security tools, experimental case or other interesting things with LLM or GPT. It includes tools for integrated security, auditing, reconnaissance, offensive security, detecting security issues, preventing security breaches, social engineering, reverse engineering, investigating security incidents, fixing security vulnerabilities, assessing security posture, and more. The list also includes experimental cases, academic research, blogs, and fun projects related to GPT security. Additionally, it provides resources on GPT security standards, bypassing security policies, bug bounty programs, cracking GPT APIs, and plugin security.
www-project-ai-security-and-privacy-guide
The OWASP AI Exchange and OWASP AI security and privacy guide are initiatives to collect and present the state of the art on AI threats, controls, security, and privacy through community collaboration. The AI Exchange is a living set of documents that collect AI threats and controls from collaboration between experts worldwide. The AI Security and Privacy Guide project has a security part that links directly to the AI Exchange, and a privacy part.
MiniAI-Face-Recognition-LivenessDetection-AndroidSDK
MiniAiLive provides system integrators with fast, flexible and extremely precise facial recognition with 3D passive face liveness detection (face anti-spoofing) that can be deployed across a number of scenarios, including security, access control, public safety, fintech, smart retail and home protection.
MiniAI-Face-Recognition-LivenessDetection-ServerSDK
The MiniAiLive Face Recognition LivenessDetection Server SDK provides system integrators with fast, flexible, and extremely precise facial recognition that can be deployed across various scenarios, including security, access control, public safety, fintech, smart retail, and home protection. The SDK is fully on-premise, meaning all processing happens on the hosting server, and no data leaves the server. The project structure includes bin, cpp, flask, model, python, test_image, and Dockerfile directories. To set up the project on Linux, download the repo, install system dependencies, and copy libraries into the system folder. For Windows, contact MiniAiLive via email. The C++ example involves replacing the license key in main.cpp, building the project, and running it. The Python example requires installing dependencies and running the project. The Python Flask example involves replacing the license key in app.py, installing dependencies, and running the project. The Docker Flask example includes building the docker image and running it. To request a license, contact MiniAiLive. Contributions to the project are welcome by following specific steps. An online demo is available at https://demo.miniai.live. Related products include MiniAI-Face-Recognition-LivenessDetection-AndroidSDK, MiniAI-Face-Recognition-LivenessDetection-iOS-SDK, MiniAI-Face-LivenessDetection-AndroidSDK, MiniAI-Face-LivenessDetection-iOS-SDK, MiniAI-Face-Matching-AndroidSDK, and MiniAI-Face-Matching-iOS-SDK. MiniAiLive is a leading AI solutions company specializing in computer vision and machine learning technologies.
ail-framework
AIL framework is a modular framework to analyze potential information leaks from unstructured data sources like pastes from Pastebin or similar services or unstructured data streams. AIL framework is flexible and can be extended to support other functionalities to mine or process sensitive information (e.g. data leak prevention).
Awesome-LM-SSP
The Awesome-LM-SSP repository is a collection of resources related to the trustworthiness of large models (LMs) across multiple dimensions, with a special focus on multi-modal LMs. It includes papers, surveys, toolkits, competitions, and leaderboards. The resources are categorized into three main dimensions: safety, security, and privacy. Within each dimension, there are several subcategories. For example, the safety dimension includes subcategories such as jailbreak, alignment, deepfake, ethics, fairness, hallucination, prompt injection, and toxicity. The security dimension includes subcategories such as adversarial examples, poisoning, and system security. The privacy dimension includes subcategories such as contamination, copyright, data reconstruction, membership inference attacks, model extraction, privacy-preserving computation, and unlearning.
last_layer
last_layer is a security library designed to protect LLM applications from prompt injection attacks, jailbreaks, and exploits. It acts as a robust filtering layer to scrutinize prompts before they are processed by LLMs, ensuring that only safe and appropriate content is allowed through. The tool offers ultra-fast scanning with low latency, privacy-focused operation without tracking or network calls, compatibility with serverless platforms, advanced threat detection mechanisms, and regular updates to adapt to evolving security challenges. It significantly reduces the risk of prompt-based attacks and exploits but cannot guarantee complete protection against all possible threats.
audioseal
AudioSeal is a method for speech localized watermarking, designed with state-of-the-art robustness and detector speed. It jointly trains a generator to embed a watermark in audio and a detector to detect watermarked fragments in longer audios, even in the presence of editing. The tool achieves top-notch detection performance at the sample level, generates minimal alteration of signal quality, and is robust to various audio editing types. With a fast, single-pass detector, AudioSeal surpasses existing models in speed, making it ideal for large-scale and real-time applications.
aiohttp-security
aiohttp_security is a library that provides identity and authorization for aiohttp.web. It offers features for handling authorization via cookies and supports aiohttp-session. The library includes examples for basic usage and database authentication, along with demos in the demo directory. For development, the library requires installation of specific requirements listed in the requirements-dev.txt file. aiohttp_security is licensed under the Apache 2 license.
blinkid-ios
BlinkID iOS is a mobile SDK that enables developers to easily integrate ID scanning and data extraction capabilities into their iOS applications. The SDK supports scanning and processing various types of identity documents, such as passports, driver's licenses, and ID cards. It provides accurate and fast data extraction, including personal information and document details. With BlinkID iOS, developers can enhance their apps with secure and reliable ID verification functionality, improving user experience and streamlining identity verification processes.
FigStep
FigStep is a black-box jailbreaking algorithm against large vision-language models (VLMs). It feeds harmful instructions through the image channel and uses benign text prompts to induce VLMs to output contents that violate common AI safety policies. The tool highlights the vulnerability of VLMs to jailbreaking attacks, emphasizing the need for safety alignments between visual and textual modalities.
0chain
Züs is a high-performance cloud on a fast blockchain offering privacy and configurable uptime. It uses erasure code to distribute data between data and parity servers, allowing flexibility for IT managers to design for security and uptime. Users can easily share encrypted data with business partners through a proxy key sharing protocol. The ecosystem includes apps like Blimp for cloud migration, Vult for personal cloud storage, and Chalk for NFT artists. Other apps include Bolt for secure wallet and staking, Atlus for blockchain explorer, and Chimney for network participation. The QoS protocol challenges providers based on response time, while the privacy protocol enables secure data sharing. Züs supports hybrid and multi-cloud architectures, allowing users to improve regulatory compliance and security requirements.
ai-exploits
AI Exploits is a repository that showcases practical attacks against AI/Machine Learning infrastructure, aiming to raise awareness about vulnerabilities in the AI/ML ecosystem. It contains exploits and scanning templates for responsibly disclosed vulnerabilities affecting machine learning tools, including Metasploit modules, Nuclei templates, and CSRF templates. Users can use the provided Docker image to easily run the modules and templates. The repository also provides guidelines for using Metasploit modules, Nuclei templates, and CSRF templates to exploit vulnerabilities in machine learning tools.
NGCBot
NGCBot is a WeChat bot based on the HOOK mechanism, supporting scheduled push of security news from FreeBuf, Xianzhi, Anquanke, and Qianxin Attack and Defense Community, KFC copywriting, filing query, phone number attribution query, WHOIS information query, constellation query, weather query, fishing calendar, Weibei threat intelligence query, beautiful videos, beautiful pictures, and help menu. It supports point functions, automatic pulling of people, ad detection, automatic mass sending, Ai replies, rich customization, and easy for beginners to use. The project is open-source and periodically maintained, with additional features such as Ai (Gpt, Xinghuo, Qianfan), keyword invitation to groups, automatic mass sending, and group welcome messages.
trickPrompt-engine
This repository contains a vulnerability mining engine based on GPT technology. The engine is designed to identify logic vulnerabilities in code by utilizing task-driven prompts. It does not require prior knowledge or fine-tuning and focuses on prompt design rather than model design. The tool is effective in real-world projects and should not be used for academic vulnerability testing. It supports scanning projects in various languages, with current support for Solidity. The engine is configured through prompts and environment settings, enabling users to scan for vulnerabilities in their codebase. Future updates aim to optimize code structure, add more language support, and enhance usability through command line mode. The tool has received a significant audit bounty of $50,000+ as of May 2024.
LLM4Decompile
LLM4Decompile is an open-source large language model dedicated to decompilation of Linux x86_64 binaries, supporting GCC's O0 to O3 optimization levels. It focuses on assessing re-executability of decompiled code through HumanEval-Decompile benchmark. The tool includes models with sizes ranging from 1.3 billion to 33 billion parameters, available on Hugging Face. Users can preprocess C code into binary and assembly instructions, then decompile assembly instructions into C using LLM4Decompile. Ongoing efforts aim to expand capabilities to support more architectures and configurations, integrate with decompilation tools like Ghidra and Rizin, and enhance performance with larger training datasets.
reverse-engineering-assistant
ReVA (Reverse Engineering Assistant) is a project aimed at building a disassembler agnostic AI assistant for reverse engineering tasks. It utilizes a tool-driven approach, providing small tools to the user to empower them in completing complex tasks. The assistant is designed to accept various inputs, guide the user in correcting mistakes, and provide additional context to encourage exploration. Users can ask questions, perform tasks like decompilation, class diagram generation, variable renaming, and more. ReVA supports different language models for online and local inference, with easy configuration options. The workflow involves opening the RE tool and program, then starting a chat session to interact with the assistant. Installation includes setting up the Python component, running the chat tool, and configuring the Ghidra extension for seamless integration. ReVA aims to enhance the reverse engineering process by breaking down actions into small parts, including the user's thoughts in the output, and providing support for monitoring and adjusting prompts.
AutoAudit
AutoAudit is an open-source large language model specifically designed for the field of network security. It aims to provide powerful natural language processing capabilities for security auditing and network defense, including analyzing malicious code, detecting network attacks, and predicting security vulnerabilities. By coupling AutoAudit with ClamAV, a security scanning platform has been created for practical security audit applications. The tool is intended to assist security professionals with accurate and fast analysis and predictions to combat evolving network threats.
hCaptcha-Solver
hCaptcha-Solver is an AI-based hcaptcha text challenge solver that utilizes the playwright module to generate the hsw N data. It can solve any text challenge without any problem, but may be flagged on some websites like Discord. The tool requires proxies since hCaptcha also rate limits. Users can run the 'hsw_api.py' before running anything and then integrate the usage shown in 'main.py' into their projects that require hCaptcha solving. Please note that this tool only works on sites that support hCaptcha text challenge.
patchwork
PatchWork is an open-source framework designed for automating development tasks using large language models. It enables users to automate workflows such as PR reviews, bug fixing, security patching, and more through a self-hosted CLI agent and preferred LLMs. The framework consists of reusable atomic actions called Steps, customizable LLM prompts known as Prompt Templates, and LLM-assisted automations called Patchflows. Users can run Patchflows locally in their CLI/IDE or as part of CI/CD pipelines. PatchWork offers predefined patchflows like AutoFix, PRReview, GenerateREADME, DependencyUpgrade, and ResolveIssue, with the flexibility to create custom patchflows. Prompt templates are used to pass queries to LLMs and can be customized. Contributions to new patchflows, steps, and the core framework are encouraged, with chat assistants available to aid in the process. The roadmap includes expanding the patchflow library, introducing a debugger and validation module, supporting large-scale code embeddings, parallelization, fine-tuned models, and an open-source GUI. PatchWork is licensed under AGPL-3.0 terms, while custom patchflows and steps can be shared using the Apache-2.0 licensed patchwork template repository.
reolink_aio
The 'reolink_aio' Python package is designed to integrate Reolink devices (NVR/cameras) into your application. It implements Reolink IP NVR and camera API, allowing users to subscribe to Reolink ONVIF SWN events for real-time event notifications via webhook. The package provides functionalities to obtain and cache NVR or camera settings, capabilities, and states, as well as enable features like infrared lights, spotlight, and siren. Users can also subscribe to events, renew timers, and disconnect from the host device.
CredSweeper
CredSweeper is a tool designed to detect credentials like tokens, passwords, and API keys in directories or files. It helps users identify potential exposure of sensitive information by scanning lines, filtering, and utilizing an AI model. The tool reports lines containing possible credentials, their location, and the expected type of credential.
code2prompt
code2prompt is a command-line tool that converts your codebase into a single LLM prompt with a source tree, prompt templating, and token counting. It automates generating LLM prompts from codebases of any size, customizing prompt generation with Handlebars templates, respecting .gitignore, filtering and excluding files using glob patterns, displaying token count, including Git diff output, copying prompt to clipboard, saving prompt to an output file, excluding files and folders, adding line numbers to source code blocks, and more. It helps streamline the process of creating LLM prompts for code analysis, generation, and other tasks.
watchtower
AIShield Watchtower is a tool designed to fortify the security of AI/ML models and Jupyter notebooks by automating model and notebook discoveries, conducting vulnerability scans, and categorizing risks into 'low,' 'medium,' 'high,' and 'critical' levels. It supports scanning of public GitHub repositories, Hugging Face repositories, AWS S3 buckets, and local systems. The tool generates comprehensive reports, offers a user-friendly interface, and aligns with industry standards like OWASP, MITRE, and CWE. It aims to address the security blind spots surrounding Jupyter notebooks and AI models, providing organizations with a tailored approach to enhancing their security efforts.
Academic_LLM_Sec_Papers
Academic_LLM_Sec_Papers is a curated collection of academic papers related to LLM Security Application. The repository includes papers sorted by conference name and published year, covering topics such as large language models for blockchain security, software engineering, machine learning, and more. Developers and researchers are welcome to contribute additional published papers to the list. The repository also provides information on listed conferences and journals related to security, networking, software engineering, and cryptography. The papers cover a wide range of topics including privacy risks, ethical concerns, vulnerabilities, threat modeling, code analysis, fuzzing, and more.
jailbreak_llms
This is the official repository for the ACM CCS 2024 paper 'Do Anything Now': Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Models. The project employs a new framework called JailbreakHub to conduct the first measurement study on jailbreak prompts in the wild, collecting 15,140 prompts from December 2022 to December 2023, including 1,405 jailbreak prompts. The dataset serves as the largest collection of in-the-wild jailbreak prompts. The repository contains examples of harmful language and is intended for research purposes only.
aioquic
aioquic is a Python library for the QUIC network protocol, featuring a minimal TLS 1.3 implementation, a QUIC stack, and an HTTP/3 stack. It is designed to be embedded into Python client and server libraries supporting QUIC and HTTP/3, with IPv4 and IPv6 support, connection migration, NAT rebinding, logging TLS traffic secrets and QUIC events, server push, WebSocket bootstrapping, and datagram support. The library follows the 'bring your own I/O' pattern for QUIC and HTTP/3 APIs, making it testable and integrable with different concurrency models.
safeguards-shield
Safeguards Shield is a security and alignment toolkit designed to detect unwanted inputs and LLM outputs. It provides tools to optimize RAG pipelines for accuracy and ensure trustworthy AI needs are met. The SDK aims to make LLMs accurate and secure, unlocking value faster by unifying a set of tools.
cf-proxy-ex
Cloudflare Proxy EX is a tool that provides Cloudflare super proxy, OpenAI/ChatGPT proxy, Github acceleration, and online proxy services. It allows users to create a worker in Cloudflare website by copying the content from worker.js file, and add their domain name before any URL to use the tool. The tool is an improvement based on gaboolic's cloudflare-reverse-proxy, offering features like removing '/proxy/', handling redirection events, modifying headers, converting relative paths to absolute paths, and more. It aims to enhance proxy functionality and address issues faced by some websites. However, users are advised not to log in to any website through the online proxy due to potential security risks.
DeGPT
DeGPT is a tool designed to optimize decompiler output using Large Language Models (LLM). It requires manual installation of specific packages and setting up API key for OpenAI. The tool provides functionality to perform optimization on decompiler output by running specific scripts.
AirGuard
AirGuard is an anti-tracking protection app designed to protect Android users from being tracked by AirTags and other Find My devices. The app periodically scans the surroundings for potential tracking devices and notifies the user if being followed. Users can play a sound on AirTags, view tracked locations, and participate in a research study on privacy protection. AirGuard does not monetize through ads or in-app purchases and ensures all tracking detection and notifications happen locally on the user's device.
agentic_security
Agentic Security is an open-source vulnerability scanner designed for safety scanning, offering customizable rule sets and agent-based attacks. It provides comprehensive fuzzing for any LLMs, LLM API integration, and stress testing with a wide range of fuzzing and attack techniques. The tool is not a foolproof solution but aims to enhance security measures against potential threats. It offers installation via pip and supports quick start commands for easy setup. Users can utilize the tool for LLM integration, adding custom datasets, running CI checks, extending dataset collections, and dynamic datasets with mutations. The tool also includes a probe endpoint for integration testing. The roadmap includes expanding dataset variety, introducing new attack vectors, developing an attacker LLM, and integrating OWASP Top 10 classification.
XcodeLLMEligible
XcodeLLMEligible is a project that provides ways to enjoy Xcode LLM on ChinaSKU Mac without disabling SIP. It offers methods for script execution and manual execution, allowing users to override eligibility service features. The project is for learning and research purposes only, and users are responsible for compliance with applicable laws. The author disclaims any responsibility for consequences arising from the use of the project.
awesome-llm-security
Awesome LLM Security is a curated collection of tools, documents, and projects related to Large Language Model (LLM) security. It covers various aspects of LLM security including white-box, black-box, and backdoor attacks, defense mechanisms, platform security, and surveys. The repository provides resources for researchers and practitioners interested in understanding and safeguarding LLMs against adversarial attacks. It also includes a list of tools specifically designed for testing and enhancing LLM security.
HaE
HaE is a framework project in the field of network security (data security) that combines artificial intelligence (AI) large models to achieve highlighting and information extraction of HTTP messages (including WebSocket). It aims to reduce testing time, focus on valuable and meaningful messages, and improve vulnerability discovery efficiency. The project provides a clear and visual interface design, simple interface interaction, and centralized data panel for querying and extracting information. It also features built-in color upgrade algorithm, one-click export/import of data, and integration of AI large models API for optimized data processing.
CipherChat
CipherChat is a novel framework designed to examine the generalizability of safety alignment to non-natural languages, specifically ciphers. The framework utilizes human-unreadable ciphers to potentially bypass safety alignments in natural language models. It involves teaching a language model to comprehend ciphers, converting input into a cipher format, and employing a rule-based decrypter to convert model output back to natural language.
bpf-developer-tutorial
This is a development tutorial for eBPF based on CO-RE (Compile Once, Run Everywhere). It provides practical eBPF development practices from beginner to advanced, including basic concepts, code examples, and real-world applications. The tutorial focuses on eBPF examples in observability, networking, security, and more. It aims to help eBPF application developers quickly grasp eBPF development methods and techniques through examples in languages such as C, Go, and Rust. The tutorial is structured with independent eBPF tool examples in each directory, covering topics like kprobes, fentry, opensnoop, uprobe, sigsnoop, execsnoop, exitsnoop, runqlat, hardirqs, and more. The project is based on libbpf and frameworks like libbpf, Cilium, libbpf-rs, and eunomia-bpf for development.
LLM-PLSE-paper
LLM-PLSE-paper is a repository focused on the applications of Large Language Models (LLMs) in Programming Language and Software Engineering (PL/SE) domains. It covers a wide range of topics including bug detection, specification inference and verification, code generation, fuzzing and testing, code model and reasoning, code understanding, IDE technologies, prompting for reasoning tasks, and agent/tool usage and planning. The repository provides a comprehensive collection of research papers, benchmarks, empirical studies, and frameworks related to the capabilities of LLMs in various PL/SE tasks.
DAILA
DAILA is a unified interface for AI systems in decompilers, supporting various decompilers and AI systems. It allows users to utilize local and remote LLMs, like ChatGPT and Claude, and local models such as VarBERT. DAILA can be used as a decompiler plugin with GUI or as a scripting library. It also provides a Docker container for offline installations and supports tasks like summarizing functions and renaming variables in decompilation.
frigate-hass-integration
Frigate Home Assistant Integration provides a rich media browser with thumbnails and navigation, sensor entities for camera FPS, detection FPS, process FPS, skipped FPS, and objects detected, binary sensor entities for object motion, camera entities for live view and object detected snapshot, switch entities for clips, detection, snapshots, and improve contrast, and support for multiple Frigate instances. It offers easy installation via HACS and manual installation options for advanced users. Users need to configure the `mqtt` integration for Frigate to work. Additionally, media browsing and a companion Lovelace card are available for enhanced user experience. Refer to the main Frigate documentation for detailed installation instructions and usage guidance.
dioptra
Dioptra is a software test platform for assessing the trustworthy characteristics of artificial intelligence (AI). It supports the NIST AI Risk Management Framework by providing functionality to assess, analyze, and track identified AI risks. Dioptra provides a REST API and can be controlled via a web interface or Python client for designing, managing, executing, and tracking experiments. It aims to be reproducible, traceable, extensible, interoperable, modular, secure, interactive, shareable, and reusable.
invariant
Invariant Analyzer is an open-source scanner designed for LLM-based AI agents to find bugs, vulnerabilities, and security threats. It scans agent execution traces to identify issues like looping behavior, data leaks, prompt injections, and unsafe code execution. The tool offers a library of built-in checkers, an expressive policy language, data flow analysis, real-time monitoring, and extensible architecture for custom checkers. It helps developers debug AI agents, scan for security violations, and prevent security issues and data breaches during runtime. The analyzer leverages deep contextual understanding and a purpose-built rule matching engine for security policy enforcement.
PentestGPT
PentestGPT provides advanced AI and integrated tools to help security teams conduct comprehensive penetration tests effortlessly. Scan, exploit, and analyze web applications, networks, and cloud environments with ease and precision, without needing expert skills. The tool utilizes Supabase for data storage and management, and Vercel for hosting the frontend. It offers a local quickstart guide for running the tool locally and a hosted quickstart guide for deploying it in the cloud. PentestGPT aims to simplify the penetration testing process for security professionals and enthusiasts alike.
AI-Security-and-Privacy-Events
AI-Security-and-Privacy-Events is a curated list of academic events focusing on AI security and privacy. It includes seminars, conferences, workshops, tutorials, special sessions, and covers various topics such as NLP & LLM Security, Privacy and Security in ML, Machine Learning Security, AI System with Confidential Computing, Adversarial Machine Learning, and more.
Botright
Botright is a tool designed for browser automation that focuses on stealth and captcha solving. It uses a real Chromium-based browser for enhanced stealth and offers features like browser fingerprinting and AI-powered captcha solving. The tool is suitable for developers looking to automate browser tasks while maintaining anonymity and bypassing captchas. Botright is available in async mode and can be easily integrated with existing Playwright code. It provides solutions for various captchas such as hCaptcha, reCaptcha, and GeeTest, with high success rates. Additionally, Botright offers browser stealth techniques and supports different browser functionalities for seamless automation.
SecReport
SecReport is a platform for collaborative information security penetration testing report writing and exporting, powered by ChatGPT. It standardizes penetration testing processes, allows multiple users to edit reports, offers custom export templates, generates vulnerability summaries and fix suggestions using ChatGPT, and provides APP security compliance testing reports. The tool aims to streamline the process of creating and managing security reports for penetration testing and compliance purposes.
Workshops
Workshops is a repository containing workshop subjects and materials for developers. It covers a wide range of topics including AI, AR/VR, hardware, security, software, and peer-to-peer technologies. The repository is designed to provide developers with resources and materials to enhance their skills and knowledge in various technology domains.
AwesomeLLM4APR
Awesome LLM for APR is a repository dedicated to exploring the capabilities of Large Language Models (LLMs) in Automated Program Repair (APR). It provides a comprehensive collection of research papers, tools, and resources related to using LLMs for various scenarios such as repairing semantic bugs, security vulnerabilities, syntax errors, programming problems, static warnings, self-debugging, type errors, web UI tests, smart contracts, hardware bugs, performance bugs, API misuses, crash bugs, test case repairs, formal proofs, GitHub issues, code reviews, motion planners, human studies, and patch correctness assessments. The repository serves as a valuable reference for researchers and practitioners interested in leveraging LLMs for automated program repair.
cheating-based-prompt-engine
This is a vulnerability mining engine purely based on GPT, requiring no prior knowledge base, no fine-tuning, yet its effectiveness can overwhelmingly surpass most of the current related research. The core idea revolves around being task-driven, not question-driven, driven by prompts, not by code, and focused on prompt design, not model design. The essence is encapsulated in one word: deception. It is a type of code understanding logic vulnerability mining that fully stimulates the capabilities of GPT, suitable for real actual projects.
AV-Deepfake1M
The AV-Deepfake1M repository is the official repository for the paper AV-Deepfake1M: A Large-Scale LLM-Driven Audio-Visual Deepfake Dataset. It addresses the challenge of detecting and localizing deepfake audio-visual content by proposing a dataset containing video manipulations, audio manipulations, and audio-visual manipulations for over 2K subjects resulting in more than 1M videos. The dataset is crucial for developing next-generation deepfake localization methods.
GhidrOllama
GhidrOllama is a script that interacts with Ollama's API to perform various reverse engineering tasks within Ghidra. It supports both local and remote instances of Ollama, providing functionalities like explaining functions, suggesting names, rewriting functions, finding bugs, and automating analysis of specific functions in binaries. Users can ask questions about functions, find vulnerabilities, and receive explanations of assembly instructions. The script bridges the gap between Ghidra and Ollama models, enhancing reverse engineering capabilities.
minefield
BitBom Minefield is a tool that uses roaring bit maps to graph Software Bill of Materials (SBOMs) with a focus on speed, air-gapped operation, scalability, and customizability. It is optimized for rapid data processing, operates securely in isolated environments, supports millions of nodes effortlessly, and allows users to extend the project without relying on upstream changes. The tool enables users to manage and explore software dependencies within isolated environments by offline processing and analyzing SBOMs.
nesa
Nesa is a tool that allows users to run on-prem AI for a fraction of the cost through a blind API. It provides blind privacy, zero latency on protected inference, wide model coverage, cost savings compared to cloud and on-prem AI, RAG support, and ChatGPT compatibility. Nesa achieves blind AI through Equivariant Encryption (EE), a new security technology that provides complete inference encryption with no additional latency. EE allows users to perform inference on neural networks without exposing the underlying data, preserving data privacy and security.
aiohttp-remotes
aiohttp-remotes is a library containing a set of useful tools for aiohttp.web server. It includes functionalities such as restricting incoming connections to allowed hosts only, protecting web applications with basic auth authorization, ensuring web applications are protected by CloudFlare, processing HTTP headers for secure and relaxed modes, handling HTTPS only, and redirecting plain HTTP to HTTPS automatically. The library provides tools for managing various aspects of web server security and configuration.
quark-engine
Quark Engine is an AI-powered tool designed for analyzing Android APK files. It focuses on enhancing the detection process for auto-suggestion, enabling users to create detection workflows without coding. The tool offers an intuitive drag-and-drop interface for workflow adjustments and updates. Quark Agent, the core component, generates Quark Script code based on natural language input and feedback. The project is committed to providing a user-friendly experience for designing detection workflows through textual and visual methods. Various features are still under development and will be rolled out gradually.
SinkFinder
SinkFinder + LLM is a closed-source semi-automatic vulnerability discovery tool that performs static code analysis on jar/war/zip files. It enhances the capability of LLM large models to verify path reachability and assess the trustworthiness score of the path based on the contextual code environment. Users can customize class and jar exclusions, depth of recursive search, and other parameters through command-line arguments. The tool generates rule.json configuration file after each run and requires configuration of the DASHSCOPE_API_KEY for LLM capabilities. The tool provides detailed logs on high-risk paths, LLM results, and other findings. Rules.json file contains sink rules for various vulnerability types with severity levels and corresponding sink methods.
garak
Garak is a vulnerability scanner designed for LLMs (Large Language Models) that checks for various weaknesses such as hallucination, data leakage, prompt injection, misinformation, toxicity generation, and jailbreaks. It combines static, dynamic, and adaptive probes to explore vulnerabilities in LLMs. Garak is a free tool developed for red-teaming and assessment purposes, focusing on making LLMs or dialog systems fail. It supports various LLM models and can be used to assess their security and robustness.
Kuzco
Enhance your Terraform and OpenTofu configurations with intelligent analysis powered by local LLMs. Kuzco reviews your resources, compares them to the provider schema, detects unused parameters, and suggests improvements for a more secure, reliable, and optimized setup. It saves time by avoiding the need to dig through the Terraform registry and decipher unclear options.
116 - OpenAI Gpts
Your personal GRC & Security Tutor
A training tool for infosec professionals to improve their skills in GRC & security and help obtain related certifications.
Securia
AI-powered audit ally. Enhance cybersecurity effortlessly with intelligent, automated security analysis. Safe, swift, and smart.
AdversarialGPT
Adversarial AI expert aiding in AI red teaming, informed by cutting-edge industry research (early dev)
Spam Jester
Based off of reddit thread r/scambait. Spam Jester is a role playing bot that engages with spam/scam messages to waste scammer's time with funny replys. Upload a spam message to generate a funny reply!
Defender for Endpoint Guardian
To assist individuals seeking to learn about or work with Microsoft's Defender for Endpoint. I provide detailed explanations, step-by-step guides, troubleshooting advice, cybersecurity best practices, and demonstrations, all specifically tailored to Microsoft Defender for Endpoint.
fox8 botnet paper
A helpful guide for understanding the paper "Anatomy of an AI-powered malicious social botnet"
KQL Query Helper
The KQL Query Helper GPT is tailored specifically for assisting users with Kusto Query Language (KQL) queries. It leverages extensive knowledge from Azure Data Explorer documentation to aid users in understanding, reviewing, and creating new KQL queries based on their prompts.
Prompt Injection Detector
GPT used to classify prompts as valid inputs or injection attempts. Json output.
VulnGPT
Your ally in navigating the CVE deluge. Expert insights for prioritizing and remediating vulnerabilities.
Message Header Analyzer
Analyzes email headers for security insights, presenting data in a structured table view.
Keyhacks GPT
Identifies API keys in text and provides service details and usage instructions.
RobotGPT
Expert in ethical hacking, leveraging https://pentestbook.six2dez.com/ and https://book.hacktricks.xyz resources for CTFs and challenges.
Phish or No Phish Trainer
Hone your phishing detection skills! Analyze emails, texts, and calls to spot deception. Become a security pro!
Regex Wizard
Generate and explain regex patterns from your description, it support English and Chinese.
WVA
Web Vulnerability Academy (WVA) is an interactive tutor designed to introduce users to web vulnerabilities while also providing them with opportunities to assess and enhance their knowledge through testing.
Password Guardian
I create ultra-secure, random passwords and offer concise security tips.
Le VPN - Your Secure Internet Proxy
Bypass Internet censorship & improve your security online
Best Spy Apps for Android (Q&A)
FREE tool to compare best spy apps for Android. Get answers to your questions and explore features, pricing, pros and cons of each spy app.
SSLLMs Advisor
Helps you build logic security into your GPTs custom instructions. Documentation: https://github.com/infotrix/SSLLMs---Semantic-Secuirty-for-LLM-GPTs
Fluffy Risk Analyst
A cute sheep expert in risk analysis, providing downloadable checklists.
SkyNet - Global Conflict Analyst
Global Conflict Analyst that will provide a 'wartime update' on the worst global conflict atm.
Code Cracker
James Bond inspired code cracking game. Copyright (C) 2023, Sourceduty - All Rights Reserved.
Security Testing Advisor
Ensures software security through comprehensive testing techniques.
🛡️ CodeGuardian Pro+ 🛡️
Your AI-powered sentinel for code! Scans for vulnerabilities, offers security tips, and educates on best practices in cybersecurity. 🔍🔐
CISO GPT
Specialized LLM in computer security, acting as a CISO with 20 years of experience, providing precise, data-driven technical responses to enhance organizational security.
Ethical Hacking GPT
Guide to ethical hacking, specializing in NMAP | For Educational Purposes Only | CSV Upload Suggested |
BaseCharacterGPTs(Whisker Sentinel v3)
Safeguarding secrets with respectful, vigilant responses
ZKP Educator
An expert on Zero-Knowledge Proofs, explaining concepts through stories and examples.
Password Game
A playful game master for a password guessing game, maintaining secrecy and engagement.
AI Implementation Guide for Sensitive/Private Data
Guide on AI implementation for secure data, with a focus on best practices and tools.
A Monitoring Expert
Expert in host monitoring setup, providing seamless network monitoring solutions.
Phoenix Vulnerability Intelligence GPT
Expert in analyzing vulnerabilities with ransomware focus with intelligence powered by Phoenix Security
PentestGPT
A cybersecurity expert aiding in penetration testing. Check repo: https://github.com/GreyDGL/PentestGPT
Mónica
CSIRT que lidera un equipo especializado en detectar y responder a incidentes de seguridad, maneja la contención y recuperación, organiza entrenamientos y simulacros, elabora reportes para optimizar estrategias de seguridad y coordina con entidades legales cuando es necesario
Thinks and Links Digest
Archive of content shared in Randy Lariar's weekly "Thinks and Links" newsletter about AI, Risk, and Security.
Java Security Expert
Java Security Expert offering advice on best practices and resolving security issues.
BashEmulator GPT
BashEmulator GPT: A Virtualized Bash Environment for Linux Command Line Interaction. It virtualized all network interfaces and local network
Log Analyzer
I'm designed to help You analyze any logs like Linux system logs, Windows logs, any security logs, access logs, error logs, etc. Please do not share information that You would like to keep private. The author does not collect or process any personal data.