Claude Mythos 5.2
The restricted twin of Fable 5.2. Access is through Anthropic's cyber and life sciences verification programs.
Best Security Builds on X
Pentest agents, air-gapped gadgets, compliance tooling. We skip the $68-to-$750k trading-bot posts. 50 builds on this page, each with the original post.
Checkride
Scans MCP servers and agent tools for actions that run without asking. Open source.
ENGRAM
Local app and CLI that finds duplicate files and what changed between snapshots. Open source.
Suzaku
Sigma-based threat hunting and forensics timelines for cloud logs. This release adds Google Workspace and AWS console CSV. Open source.
brotli-checker
Finds hidden copies of the Node.js Brotli decoder, including inside stripped binaries.
Devin vuln fixes
Agent plugin for the recent PHP and Node vulnerabilities. Open sourced by Cognition's CISO.
Confidence
Agents collaborate with scoped authority, and each release comes with a receipt you can verify. Their entry for a Cloudflare competition.
AgentSec
Open source adversarial tests for AI agents: prompt injection, tool misuse, memory poisoning, and MCP scanning.
reverse.whattheflip
Browser game that teaches reverse engineering. Scan memory, catch the code that hurts you, patch hits so they heal.
NoireBox
Flight recorder for AI agents. Hash-chained, signed, timestamped, verifiable offline. MIT.
VRead
Give agents Vercel data without a token that can wipe a project.
jevscan
Proof-of-concept code vulnerability scanner using Jev. Flags risky code without an LLM writeup.
Agent Plugin Secret Guard
Plugin and hooks that stop CLI agents from printing secrets. Works with Claude Code, Codex, Droid, OpenCode, and Cursor.
SealGate
Local LLM gate that hides sensitive info before it reaches online model providers.
Droid ASC
Fast Android decompiler for agents. Global xrefs in seconds, class decompile in milliseconds. Black Hat EU Arsenal.
trailmix
Quantum circuit toolkit from Trail of Bits. Circuits on ECDSA.fail were built on it.
Claude Mythos 5.1
Same weights as Fable 5.1, fewer safeguards. Restricted to cyberdefenders and life scientists via trusted access.
Claude Security on Mythos 5
Claude Security scans now run on Mythos 5. Public beta for Claude Enterprise. First-party.
Mythos cryptographic weaknesses
Mythos Preview found new attacks on HAWK and a reduced AES. First-party research from Anthropic.
GLM-5.3 open weights
The full GLM-5.3 coding and cyber-defense model is now downloadable on Hugging Face. Same base as 5.2, post-trained.
chock
Sandboxed AI harness in Zig. Landlock, eBPF, and namespaces isolate tool calls. WASM plugins over IPC.
logtotal-sanitizer
Redact secrets and PII from logs in the browser or CLI, with stable HMAC tokens and no runtime deps.
AuditCode
14-agent security auditing harness in the terminal, rebuilt for Web3 on OpenCode.
Omarchy Plugin CI
GitHub Action that checks Omarchy plugins: manifests, QML lifecycle, risky capabilities, isolated install and remove.
GhostDebug
x64 VEH Windows debugger that skips Win32 debug APIs so common anti-debug checks never see it.
SubMap
Subdomain discovery for bug bounty. 2.2M+ names found in the first hours after launch.
sshdesk
SSH server that remote-desktops another PC straight in your terminal.
kcc20-forensics
Toolkit for public Kaspa transactions, covenants, KCC20 tokens, AMMs, holders, and wallet relationships.
Reachable
An advisory names the package. This tells you whether you installed the bad version while it was still live.
Epicenter
Reads an npm lockfile and shows if a project contains a compromised package, how it got there, and what else is at risk.
Internal Sites template
Cloudflare template for an internal static-site platform. Everything deployed is private by default.
CyberMeowfia
One-click Docker setups and exploits for Nginx PoolSlip and QuicBurst, with ASLR bypass.
ida-porter
Move a substantial IDA 8.x infrastructure to 9.x. Open-sourced by Cellebrite Labs.
Auditician
Open-source Claude agent definitions that pretty much fully automate a security audit.
Tally
Local-first trading journal. CSV import from 13 brokers, data never leaves your machine. macOS and Windows.
Clypy
Encrypted clipboard that works across Mac and Windows. Search, filter, paste stack. Local memory for agents.
PassStore
Local-first macOS secret manager. Link .env files, rotate keys, write them back. AES-256, Touch ID, no cloud.
REDCELL
Open-source AI agents that run a full pentest end to end, from recon through exploit, reverse shell and pivot, then write a client-ready PDF report.
GLM-5.3
Z.ai’s new coding and cyber-defense model, post-trained on a 743B base. Agentic coding jumps over GLM-5.2 and it is live now via GLM Coding Plan and ZCode.
PentesterFlow
Open-source CLI agent for authorized pentests. Plan, act, observe, verify, report. Local or hosted LLMs. Burp + MCP.
Ainiux
Open-source agent, editor and security-review tool. Headless CLI, any OpenAI-compatible endpoint.
QR Phone-to-Phone File Transfer
Sends files between phones with no WiFi, Bluetooth or network. QR codes flash on one screen into the other camera at 129KB/s. Built in one night with Claude Code.
Superblocks 3.0
Secure enterprise-grade platform that lets companies vibe-code production software inside their own AWS environment.
CS2 Anti-Cheat Systems
Two open anti-cheat projects for Counter-Strike 2: server-side occlusion culling (CS2FOW) and a multi-module detection system (CS2AC).
DEF CON 34 Open Silicon Badge
This year's DEF CON badge runs open-source RISC-V silicon you can visually verify against the published RTL with an IR microscope. Doubles as a security key.
Prismor
Open-source control plane for AI agents. Defense by default. Used by thousands of devs a month.
SeedTapper – Air-gapped Seed Engraver
Open-source air-gapped machine (Pi 5 + fiber laser) that engraves Bitcoin seed plates in titanium.
Camera Air-Gapped File Transfer
Vibe-coded tool that transfers files from computer to phone using only the camera (completely air-gapped).
