Security proxy for AI agents. Scans every message for prompt injection, PII, and secrets. Defense-in-depth: Go proxy + iptables firewall + eBPF kernel monitor. YAML policy engine, audit logging, 5 AI agents with RAG knowledge bases.

Layer for static code analysis and security hardening

FAANG (MANGA) Security Engineer Interview Collection. An ongoing & curated collection of awesome software, frameworks and libraries, learning tutorials and videos, technical guidelines and best practices, and cheatsheets in the world of Security Engineering Career.

An open taxonomy and scoring framework for evaluating AI agent sandboxes: 7 defense layers, 7 threat categories, 3 evaluation dimensions, 27 "sandboxes" scored.

This repository contains a collection of PowerShell tools that can be utilized to protect and defend an environment based on the recommendations of multiple cyber security researchers at Microsoft. These tools were created with a small to medium size enterprise environment in mind as smaller organizations do not always have the type of funding a…

AgentWard – Built for all, hardened for OpenClaw.

A comprehensive toolkit for analyzing stealer malware families and C2 infrastructure.

Defense-in-depth primitives for CVE-2026-31431 (Copy Fail) — kernel detection probe and LD_PRELOAD AF_ALG block

Winning entry for the BitGN Personal Agent Challenge (PAC) 2026 — defense-in-depth personal agent with soft SGR, layered prompt-injection hardening, and Vercel AI SDK native tool calling.

A multi-layered prompt injection detection system built with Laravel.

Self-hosted homelab on Ubuntu 24.04 — ~50 Docker services, defense-in-depth security, zero open inbound ports, fully reproducible IaC

Human-in-the-loop governance middleware preventing AI hallucination at the Git level.

Production-ready security playbook for AI agent deployments. Addresses backup file persistence, authentication bypass, and prompt injection vulnerabilities. Integrates openclaw-detect, openclaw-telemetry, openclaw-shield, and clawguard.

AEGIS : Authenticated Execution Gateway for Injection Security. Open-source, model agnostic prompt injection defense gateway for LLM apps. Five composed layers: CCPT, Trust Lattice, Intent Anchor, Canary Tripwires, Capability Tokens.

Eight constrained reviewers. Each scoped to a different failure surface. Hook-enforced walls, not just prompts.

Threat-oriented defensive frameworks reorganizing PCI DSS v4.0.1 requirements by attack type rather than compliance checklist. Educational guide for security professionals implementing strategic layered defense.

Defense-in-depth platform for running OpenClaw agents on personal hardware

🔍 Monitor AI activities and enhance security with ClawGuard, the real-time dashboard for OpenClaw, featuring analytics and an emergency kill switch.

Zero-dep TypeScript prompt-injection firewall: block/excise/quarantine/tag modes, Unicode Plane 14, encoding-bypass resistance (leet/base64/ROT13), output exfil + canary validation. OWASP LLM01/ASI01.

Security-hardened fork of OpenClaw — defense-in-depth for AI agents (secrets management, sandbox enforcement, audit logging, SIEM integration, command policy, egress filtering)