| the LLM vulnerability scanner | Detection and Monitoring | Vulnerability Scanners |
| LLM vulnerability scanner | Detection and Monitoring | Vulnerability Scanners |
| AI Security Scanner - Test your AI sy | Detection and Monitoring | Vulnerability Scanners |
| R.A.Y.D.E.R revolutionizes security test | Detection and Monitoring | Vulnerability Scanners |
| Protection against Model Serializatio | Detection and Monitoring | Vulnerability Scanners |
| Fiddler Auditor is a tool to | Detection and Monitoring | Vulnerability Scanners |
| AI-Driven Security Assessment - Connect AI | Detection and Monitoring | Vulnerability Scanners |
| A.I.G (AI-Infra-Guard) is a compre | Detection and Monitoring | Vulnerability Scanners |
| Free LLM-based Vulnerability Scans for Open Source Projects | Detection and Monitoring | Vulnerability Scanners |
| Achieving CVE Remediation in an Era of Escalating Vulnerabilities - Flox | Detection and Monitoring | Vulnerability Scanners |
| Active defense: introducing a stateful vulnerability scanner for APIs | Detection and Monitoring | Vulnerability Scanners |
| ADPulse - Active Directory security scanner | Detection and Monitoring | Vulnerability Scanners |
| AllForOne - Nuclei template collector for bug bounty hunters | Detection and Monitoring | Vulnerability Scanners |
| Andrew Ng: OpenWorker open-source agent adds built-in vulnerability and supply-chain scanning | Detection and Monitoring | Vulnerability Scanners |
| Announcing OSV-Scanner V2: Vulnerability scanner and remediation tool for open source | Detection and Monitoring | Vulnerability Scanners |
| AppLockerInspector - audits AppLocker policy for weak settings | Detection and Monitoring | Vulnerability Scanners |
| Autoswagger - detect unauthenticated API endpoints and auth weaknesses via OpenAPI specs | Detection and Monitoring | Vulnerability Scanners |
| awesome-attack-surface-monitoring - curated list of ASM tools | Detection and Monitoring | Vulnerability Scanners |
| batfish - network configuration analysis and validation tool | Detection and Monitoring | Vulnerability Scanners |
| BChecks - scripted scan checks in Burp Suite Professional | Detection and Monitoring | Vulnerability Scanners |
| Bitor scanner - Ansible playbook template that runs Nuclei scans | Detection and Monitoring | Vulnerability Scanners |
| Burp Suite Enterprise Edition 2023.12 - BChecks support | Detection and Monitoring | Vulnerability Scanners |
| burp-dom-scanner - Burp Suite extension to crawl SPAs and scan for DOM XSS | Detection and Monitoring | Vulnerability Scanners |
| cent - community Nuclei templates aggregator | Detection and Monitoring | Vulnerability Scanners |
| CRXaminer - Chrome extension security analyzer | Detection and Monitoring | Vulnerability Scanners |
| CryptoLyzer - multi-protocol cryptographic configuration analyzer for TLS, SSH, IKE, DNS and HTTP | Detection and Monitoring | Vulnerability Scanners |
| dalfox - open-source XSS scanner | Detection and Monitoring | Vulnerability Scanners |
| Defense at AI speed: Microsoft's new multi-model agentic security system tops leading industry benchmark | Detection and Monitoring | Vulnerability Scanners |
| deph-action - GitHub Action tracing which container CVEs are in your execution path | Detection and Monitoring | Vulnerability Scanners |
| dev-machine-guard - scan dev machines for AI agents, MCP servers, IDE extensions and suspicious packages | Detection and Monitoring | Vulnerability Scanners |
| DLLHound - DLL sideloading scanner for Windows | Detection and Monitoring | Vulnerability Scanners |
| dnsight - SDK and CLI for DNS, email and web security hygiene | Detection and Monitoring | Vulnerability Scanners |
| DotGit - browser extension to detect exposed .git folders | Detection and Monitoring | Vulnerability Scanners |
| DotGit - Firefox extension to detect exposed .git folders | Detection and Monitoring | Vulnerability Scanners |
| EasyEASM - zero-dollar attack surface management tool | Detection and Monitoring | Vulnerability Scanners |
| EGOAlpha - EGO vulnerability scanner and reconnaissance platform | Detection and Monitoring | Vulnerability Scanners |
| Filter Out Security Vulnerability False Positives with VEX | Detection and Monitoring | Vulnerability Scanners |
| Find-WSUS - locate WSUS configurations in GPOs after CVE-2025-59287 | Detection and Monitoring | Vulnerability Scanners |
| ghostsecurity/reaper - agent tool source in Ghost Security's live validation proxy for web app vulnerability testing | Detection and Monitoring | Vulnerability Scanners |
| ghqr - GitHub Quick Review, assess orgs against GitHub security best practices | Detection and Monitoring | Vulnerability Scanners |
| GRC ShieldsUP - Internet vulnerability profiling port scanner | Detection and Monitoring | Vulnerability Scanners |
| HVCI-loldrivers-check - check vulnerable drivers against HVCI blocklist | Detection and Monitoring | Vulnerability Scanners |
| Introducing fAST Dynamic - streamlining dynamic application security testing | Detection and Monitoring | Vulnerability Scanners |
| Introducing Nuclei v3 with improved vulnerability scanning features | Detection and Monitoring | Vulnerability Scanners |
| Introducing Orbit - BHIS tool to run Nuclei scans at scale | Detection and Monitoring | Vulnerability Scanners |
| JFrog Xray Contextual Analysis - vulnerability applicability scanning | Detection and Monitoring | Vulnerability Scanners |
| Jobert Abma on Nuclei Cloud integration into HackerOne for vulnerability detection | Detection and Monitoring | Vulnerability Scanners |
| kernel-hardening-checker - checks Linux kernel security hardening options | Detection and Monitoring | Vulnerability Scanners |
| Kubernetes Cluster Security - Nuclei Templates v9.9.0 | Detection and Monitoring | Vulnerability Scanners |
| Kubescape VEX document generation | Detection and Monitoring | Vulnerability Scanners |
| kubesplaining - Kubernetes RBAC, pod-escape and privilege-escalation security assessment CLI | Detection and Monitoring | Vulnerability Scanners |
| managed-kubernetes-auditing-toolkit - security auditing for Amazon EKS | Detection and Monitoring | Vulnerability Scanners |
| Mantis - asset discovery, recon automation and distributed scanning framework by PhonePe | Detection and Monitoring | Vulnerability Scanners |
| mantis - asset discovery, reconnaissance and vulnerability scanning framework | Detection and Monitoring | Vulnerability Scanners |
| Misconfig Mapper - detect security misconfigurations in third-party services | Detection and Monitoring | Vulnerability Scanners |
| Nero - open source HTTP API fuzzer | Detection and Monitoring | Vulnerability Scanners |
| NGINX_RIFT_SCAN - scanner for nginx rewrite vulnerability CVE-2026-42945 | Detection and Monitoring | Vulnerability Scanners |
| NightVision - Whole-App DAST for web apps and APIs | Detection and Monitoring | Vulnerability Scanners |
| Nuclei AI - browser extension for AI-generated Nuclei vulnerability templates | Detection and Monitoring | Vulnerability Scanners |
| Nuclei as a Go library - projectdiscovery/nuclei/v3/lib package | Detection and Monitoring | Vulnerability Scanners |
| Nuclei template for ServiceNow widget misconfiguration - PR #8396 | Detection and Monitoring | Vulnerability Scanners |
| Nuclei Templates Editor - create, generate, and scan templates using AI from ProjectDiscovery | Detection and Monitoring | Vulnerability Scanners |
| Online SQL Injection Vulnerability Scanner | Detection and Monitoring | Vulnerability Scanners |
| patchbot - vulnerability scanning with a coding agent that opens fix PRs | Detection and Monitoring | Vulnerability Scanners |
| pgdsat - PostgreSQL Database Security Assessment Tool | Detection and Monitoring | Vulnerability Scanners |
| picklescan - security scanner for malicious Python pickle files | Detection and Monitoring | Vulnerability Scanners |
| ProjectDiscovery on using CVEmap to find exploitable CVEs lacking Nuclei templates | Detection and Monitoring | Vulnerability Scanners |
| quibble - container security scanner for compose based configurations | Detection and Monitoring | Vulnerability Scanners |
| raven - CI/CD security analyzer for GitHub Actions workflows | Detection and Monitoring | Vulnerability Scanners |
| react2shell-scanner - detection tool for RSC/Next.js RCE CVE-2025-55182 | Detection and Monitoring | Vulnerability Scanners |
| runZero Loves Open Source - Integrating Nuclei | Detection and Monitoring | Vulnerability Scanners |
| Security Crawl Maze - testbed for web security crawlers | Detection and Monitoring | Vulnerability Scanners |
| Server-Side Prototype Pollution Scanner - Burp Suite extension | Detection and Monitoring | Vulnerability Scanners |
| servicenow - ServiceNow widget-simple-list misconfiguration scanner | Detection and Monitoring | Vulnerability Scanners |
| ship-safe - CLI security scanner for AI-written software: CI/CD, agent permissions, MCP tool injection, secrets | Detection and Monitoring | Vulnerability Scanners |
| Sirius Scan - open-source vulnerability scanner | Detection and Monitoring | Vulnerability Scanners |
| StackHawk Announces HawkScan Test Engine | Detection and Monitoring | Vulnerability Scanners |
| StepSecurity Dev Machine Guard - scans dev machines for rogue MCP servers, extensions and packages | Detection and Monitoring | Vulnerability Scanners |
| The ZAP LLM Support Add-on | Detection and Monitoring | Vulnerability Scanners |
| Unveiling poutine - an open source build pipelines security scanner | Detection and Monitoring | Vulnerability Scanners |
| Use ZAP with KRO in Kubernetes | Detection and Monitoring | Vulnerability Scanners |
| VibeAudit - BOLA/IDOR authorization scanner for AI-generated web apps | Detection and Monitoring | Vulnerability Scanners |
| Vigolium - agentic AI vulnerability scanner | Detection and Monitoring | Vulnerability Scanners |
| Visa enhances VVAH Vulnerability Agentic Harness with remediation and validation agents | Detection and Monitoring | Vulnerability Scanners |
| vsix-audit - security scanner for VS Code extensions | Detection and Monitoring | Vulnerability Scanners |
| XSSTRON - Electron browser to find XSS vulnerabilities automatically | Detection and Monitoring | Vulnerability Scanners |
| ZAP LLM Integration add-on - zap-extensions pull request 5861 | Detection and Monitoring | Vulnerability Scanners |
| MACAW Security - The Trust Layer for Enterprise AI | Detection and Monitoring | Security Platforms |
| 0Labs - AI Cyber Defense | Detection and Monitoring | Security Platforms |
| OpenAnt from Knostic is an open source LL | Detection and Monitoring | Security Platforms |
| Project CodeGuard | Detection and Monitoring | Security Platforms |
| Dropzone AI - Agentic SOC Platform | Detection and Monitoring | Security Platforms |
| AI Risk Database | Detection and Monitoring | Security Platforms |
| A curated list of t | Detection and Monitoring | Security Platforms |
| A curated list of | Detection and Monitoring | Security Platforms |
| Fishbowl - Containerized security auditing for AI coding agents | Detection and Monitoring | Security Platforms |
| Codefend - AI-powered security automation platform | Detection and Monitoring | Security Platforms |
| Databricks Announces Lakewatch: New Open Agentic SIEM | Detection and Monitoring | Security Platforms |
| eekta - AI Cyber Defense Console | Detection and Monitoring | Security Platforms |
| Bltz AI - Agentic Defensive AI Security | Detection and Monitoring | Security Platforms |
| Agent Charley by Charlemagne Labs - on-device privacy-first security agent | Detection and Monitoring | Security Platforms |
| Agentic SOC Platform: The Open-Source AI Security Revolution Taking Over Your SOC | Detection and Monitoring | Security Platforms |
| Aikido Device Protection - malicious package blocking and AI tool monitoring for dev workstations | Detection and Monitoring | Security Platforms |
| AiSOC - open-source AI-powered Security Operations Center with agent-assisted triage | Detection and Monitoring | Security Platforms |
| Akto - AI and API security platform for agents, MCPs and LLMs | Detection and Monitoring | Security Platforms |
| Allama - open-source AI security automation and SOAR platform | Detection and Monitoring | Security Platforms |
| Artiphishell Public Disclosure Ledger - AI-found vulnerabilities with sealed 30-day disclosures | Detection and Monitoring | Security Platforms |
| Avalor - Unified Vulnerability Management, now Zscaler UVM | Detection and Monitoring | Security Platforms |
| Backslash Security - agentic AI endpoint security and AppSec platform | Detection and Monitoring | Security Platforms |
| binaryedge - attack surface mapping POC in the style of Shodan and Censys | Detection and Monitoring | Security Platforms |
| Boost Security with API Security Posture Management - Microsoft Defender for Cloud | Detection and Monitoring | Security Platforms |
| Byos Secure Endpoint Edge - first-hop protection for untrusted Wi-Fi | Detection and Monitoring | Security Platforms |
| cartography - map infrastructure assets and relationships into a Neo4j graph | Detection and Monitoring | Security Platforms |
| Context Is King: From Vulnerability Management to Exposure Management | Detection and Monitoring | Security Platforms |
| CrowdStrike Falcon AIDR - AI Detection and Response, redirected from Pangea AI Escape Room | Detection and Monitoring | Security Platforms |
| CyberAgents Exchange - open-source AI agents, skills and MCP servers for cybersecurity | Detection and Monitoring | Security Platforms |
| Deepfactor - Application Security Platform | Detection and Monitoring | Security Platforms |
| DetectFlow / Prime Detect - AI-powered detection intelligence from SOC Prime | Detection and Monitoring | Security Platforms |
| Empirical Security - AI foundation model for vulnerability exploitation prediction | Detection and Monitoring | Security Platforms |
| Empirical Security - data-driven models for vulnerability prioritization and exposure management | Detection and Monitoring | Security Platforms |
| Enclave - autonomous AI security agents that find, fix and retest vulnerabilities | Detection and Monitoring | Security Platforms |
| Endor Labs launches Zero-Day Patches: verified fixes for open source zero-days within 24 hours | Detection and Monitoring | Security Platforms |
| Exploit Observer - vulnerability and exploit intelligence database | Detection and Monitoring | Security Platforms |
| Forager - Truffle Security public event monitoring | Detection and Monitoring | Security Platforms |
| FullHunt - Attack Surface Management API | Detection and Monitoring | Security Platforms |
| Ghost Security - Autonomous security agents platform | Detection and Monitoring | Security Platforms |
| harden-runner - EDR for GitHub Actions runners | Detection and Monitoring | Security Platforms |
| Incidental - open-source incident management platform with Slack integration | Detection and Monitoring | Security Platforms |
| InfraTrust - Hardware Infrastructure Risk | Detection and Monitoring | Security Platforms |
| Introducing EVA - The Employee Verification App to stop AI and voice phishing | Detection and Monitoring | Security Platforms |
| Introducing Google AI Threat Defense | Detection and Monitoring | Security Platforms |
| Introducing Microsoft Security Copilot: Empowering defenders at the speed of AI | Detection and Monitoring | Security Platforms |
| Introducing nano - lightweight SIEM in Rust with AI investigation | Detection and Monitoring | Security Platforms |
| Introducing Surf AI - automating security processes to reduce attack surface | Detection and Monitoring | Security Platforms |
| Introducing Wiz ASM: Context-Driven Attack Surface Management | Detection and Monitoring | Security Platforms |
| Introducing Wiz Code - Code-to-cloud application security | Detection and Monitoring | Security Platforms |
| IVRE - self-hosted network recon and EASM framework | Detection and Monitoring | Security Platforms |
| Koidex by Koi - risk detection for extensions, packages, apps, and models | Detection and Monitoring | Security Platforms |
| Leen - unified API for security data | Detection and Monitoring | Security Platforms |
| MagicSword - Threat-Driven Application Control | Detection and Monitoring | Security Platforms |
| Microsoft Security Copilot Early Access Program is now available | Detection and Monitoring | Security Platforms |
| Monad - security data pipelines for enterprise teams | Detection and Monitoring | Security Platforms |
| Monad, formerly Tarsal - security data pipelines for enterprise teams | Detection and Monitoring | Security Platforms |
| Oligo Focus - runtime vulnerability reachability analysis product | Detection and Monitoring | Security Platforms |
| OpenAI Daybreak - AI for cybersecurity | Detection and Monitoring | Security Platforms |
| OpenHack - your always-on AI security engineer | Detection and Monitoring | Security Platforms |
| ProjectDiscovery launches Triage to auto-reproduce and validate bug bounty vulnerability reports | Detection and Monitoring | Security Platforms |
| ProjectDiscovery Neo - AI-driven offensive security and pentesting platform from the creators of Nuclei | Detection and Monitoring | Security Platforms |
| ProjectDiscovery Triage - automated vulnerability report validation and triage | Detection and Monitoring | Security Platforms |
| Prowler - open-source cloud security platform | Detection and Monitoring | Security Platforms |
| Pruva verified reproduction: CVE-2026-33557 Apache Kafka SASL/OAUTHBEARER accepts unvalidated JWTs | Detection and Monitoring | Security Platforms |
| RapidFort - container software supply chain security platform | Detection and Monitoring | Security Platforms |
| RunReveal - security log management and SIEM with AI-powered detection | Detection and Monitoring | Security Platforms |
| Sandfly SSH Hunter - agentless SSH key and credential monitoring for Linux | Detection and Monitoring | Security Platforms |
| Seal Security - the AppSec remediation agent | Detection and Monitoring | Security Platforms |
| secureCodeBox - automated multi-scanner security testing platform | Detection and Monitoring | Security Platforms |
| Securing the AI Enterprise - Introducing Prisma AIRS 3.0 | Detection and Monitoring | Security Platforms |
| shade - shadow SaaS and credential detection via browser extension | Detection and Monitoring | Security Platforms |
| Shasta - open-source AI and cloud security platform with AI-BOM and compliance frameworks | Detection and Monitoring | Security Platforms |
| ShipSec Studio - open-source security workflow orchestration platform | Detection and Monitoring | Security Platforms |
| Shockwave - attack surface and continuous threat exposure management platform | Detection and Monitoring | Security Platforms |
| Smithy, formerly Dracon - security workflow engine | Detection and Monitoring | Security Platforms |
| solst/ICE on why appsec teams should adopt ASPM platforms | Detection and Monitoring | Security Platforms |
| The New Way to Discover Your Exposure - ProjectDiscovery | Detection and Monitoring | Security Platforms |
| ThreatMapper - open source cloud native application protection platform | Detection and Monitoring | Security Platforms |
| tuckner on SecureAnnex adding VS Code extension security analysis | Detection and Monitoring | Security Platforms |
| Vigil - open source agentic AI SOC with MCP integrations | Detection and Monitoring | Security Platforms |
| Visa Releases Its AI-Powered Cyber Defense System to Open Source | Detection and Monitoring | Security Platforms |
| Wallarm AASM - API Attack Surface Management | Detection and Monitoring | Security Platforms |
| WitnessAI - AI Security and Governance Platform | Detection and Monitoring | Security Platforms |
| Introducing VirusTotal Code Insight: Empowering threat analysis wit | Detection and Monitoring | Threat Detection and Analysis |
| Introducing Socket AI – ChatGPT-Powered Threat Analysis - Socket | Detection and Monitoring | Threat Detection and Analysis |
| Malicious ML models discovered on Hugging Face platform | Detection and Monitoring | Threat Detection and Analysis |
| An AI-powered secu | Detection and Monitoring | Threat Detection and Analysis |
| Pillar Security Unveils RedGraph: The World's First Attack Surfac | Detection and Monitoring | Threat Detection and Analysis |
| Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive I | Detection and Monitoring | Threat Detection and Analysis |
| LLM Backdoors at the Inference Level: The Threat of Poisoned Templates | Detection and Monitoring | Threat Detection and Analysis |
| Rowhammer-Based Trojan Injection: One Bit Flip Is Suffici | Detection and Monitoring | Threat Detection and Analysis |
| Awesome DFIR Skills | Detection and Monitoring | Threat Detection and Analysis |
| A guide to threat hunting and monitoring in Snowflake | Detection and Monitoring | Threat Detection and Analysis |
| A Tale of Two SOCs: Insights From Two Red Team Assessments - CISA | Detection and Monitoring | Threat Detection and Analysis |
| Agentic Threat Hunting Framework - ATHF, framework for agentic threat hunting systems | Detection and Monitoring | Threat Detection and Analysis |
| Announcing Cloudflare Fraud Detection | Detection and Monitoring | Threat Detection and Analysis |
| Announcing cvemap from ProjectDiscovery | Detection and Monitoring | Threat Detection and Analysis |
| AntiHunter DIGINODE - WiFi, BLE and drone detection hardware | Detection and Monitoring | Threat Detection and Analysis |
| Artificial authentication: Monitoring Azure OpenAI abuse | Detection and Monitoring | Threat Detection and Analysis |
| autoextdetector - a self-improving detection agent for supply-chain attacks | Detection and Monitoring | Threat Detection and Analysis |
| Azure Logs - Breaking Through the Cloud Cover | Detection and Monitoring | Threat Detection and Analysis |
| Baddie Mapper - experimental IOC and threat actor relationship mapping tool | Detection and Monitoring | Threat Detection and Analysis |
| bluehood - monitor your local neighbourhood's Bluetooth activity | Detection and Monitoring | Threat Detection and Analysis |
| BR-Phishing-Feed - CertStream phishing domain feed for Brazil filtered with Ollama | Detection and Monitoring | Threat Detection and Analysis |
| Building a Threat Intelligence GenAI Reporter with ORKL and Claude | Detection and Monitoring | Threat Detection and Analysis |
| Building Runtime Enforcement for Kubernetes with eBPF | Detection and Monitoring | Threat Detection and Analysis |
| cazadora - M365 OAuth app threat hunting script | Detection and Monitoring | Threat Detection and Analysis |
| certgrep - search Certificate Transparency logs for domain squatting and phishing | Detection and Monitoring | Threat Detection and Analysis |
| checkpointctl - analysis of container checkpoints | Detection and Monitoring | Threat Detection and Analysis |
| cicd-sensor - eBPF runtime security for GitHub Actions and GitLab CI/CD | Detection and Monitoring | Threat Detection and Analysis |
| Cloudflare Radar URL Scanner | Detection and Monitoring | Threat Detection and Analysis |
| cloudgrep - grep for cloud storage logs across S3, Azure and GCS | Detection and Monitoring | Threat Detection and Analysis |
| Coalition Exploit Scoring System - ML-powered exploit likelihood scoring for CVEs | Detection and Monitoring | Threat Detection and Analysis |
| ContentOps - detection content lifecycle for Microsoft Sentinel and Defender XDR | Detection and Monitoring | Threat Detection and Analysis |
| copy-fail CVE-2026-31431 IOC - Linux kernel privesc detection toolkit | Detection and Monitoring | Threat Detection and Analysis |
| CRADLE - collaborative Cyber Threat Intelligence platform | Detection and Monitoring | Threat Detection and Analysis |
| crt.name - passive subdomain index built from Certificate Transparency logs | Detection and Monitoring | Threat Detection and Analysis |
| ct-moniteur - Certificate Transparency log monitor | Detection and Monitoring | Threat Detection and Analysis |
| cti-expert - Cyber Threat Intelligence and OSINT analysis skill for Claude Code | Detection and Monitoring | Threat Detection and Analysis |
| CVE Crowd - crowd intelligence on actively discussed CVEs | Detection and Monitoring | Threat Detection and Analysis |
| CVEForecast - CVE publication predictions with machine learning | Detection and Monitoring | Threat Detection and Analysis |
| Defender Performance Tool - real-time Microsoft Defender scan monitor | Detection and Monitoring | Threat Detection and Analysis |
| Detection Engineering Weekly #27 | Detection and Monitoring | Threat Detection and Analysis |
| Detection Skills - open standard extending Agent Skills for agentic SOC and cyber defense engineering | Detection and Monitoring | Threat Detection and Analysis |
| Displaying IP addresses in the audit log for your GitHub Enterprise | Detection and Monitoring | Threat Detection and Analysis |
| dnsmonster - passive DNS capture and monitoring toolkit | Detection and Monitoring | Threat Detection and Analysis |
| eBPF Unleashed: The Future of Runtime Application Security | Detection and Monitoring | Threat Detection and Analysis |
| eCapture - capture SSL/TLS plaintext without a CA certificate using eBPF | Detection and Monitoring | Threat Detection and Analysis |
| EDRUnChoker - fileless WMI defense against EDRChoker QoS throttling | Detection and Monitoring | Threat Detection and Analysis |
| esxi-testing-toolkit - CLI to test ESXi detections, Atomic Red Team style | Detection and Monitoring | Threat Detection and Analysis |
| ExtensionHound - DNS forensics for browser extensions | Detection and Monitoring | Threat Detection and Analysis |
| ExtSentry - Browser Extension Threat Intelligence | Detection and Monitoring | Threat Detection and Analysis |
| Ferdous Saljooki on macOS Tahoe's XProtect ClickFix paste protection | Detection and Monitoring | Threat Detection and Analysis |
| FunkSec - Alleged Top Ransomware Group Powered by AI - Check Point Research | Detection and Monitoring | Threat Detection and Analysis |
| gibson - network monitoring tool mapping process-to-network connections and detecting beaconing | Detection and Monitoring | Threat Detection and Analysis |
| grove - HashiCorp SaaS security log collection framework | Detection and Monitoring | Threat Detection and Analysis |
| Handala Detection Pack v2: Pre-Positioning, PIM Gap, and Bulk Wipe Controls | Detection and Monitoring | Threat Detection and Analysis |
| How Google Does It: Modernizing threat detection | Detection and Monitoring | Threat Detection and Analysis |
| hunt.md - open Markdown format for threat-hunting playbooks | Detection and Monitoring | Threat Detection and Analysis |
| ice-axe - Snowflake native app for threat hunting and activity auditing | Detection and Monitoring | Threat Detection and Analysis |
| IDE Shepherd - VS Code/Cursor extension for realtime detection of malicious extensions | Detection and Monitoring | Threat Detection and Analysis |
| Immanuel on eBPF bcc-tools one-liners for process, file and network monitoring | Detection and Monitoring | Threat Detection and Analysis |
| intelsummarize - LLM threat intel report summarizer by MHaggis | Detection and Monitoring | Threat Detection and Analysis |
| Introducing EvidenceForge: Synthetic security logs that don't look as fake | Detection and Monitoring | Threat Detection and Analysis |
| Introducing YetiHunter: An open-source tool to detect and hunt for suspicious activity in Snowflake | Detection and Monitoring | Threat Detection and Analysis |
| ipinfo cli - IP geolocation and ASN lookup tool | Detection and Monitoring | Threat Detection and Analysis |
| kerlab - Kerberos in Rust for building detection rules | Detection and Monitoring | Threat Detection and Analysis |
| Kestrel - Active Directory backdoor and persistence audit tool | Detection and Monitoring | Threat Detection and Analysis |
| KEV Cross-Catalog Viewer | Detection and Monitoring | Threat Detection and Analysis |
| kntrl - eBPF runtime security agent for CI/CD pipelines | Detection and Monitoring | Threat Detection and Analysis |
| KubeHound: Identifying attack paths in Kubernetes clusters | Detection and Monitoring | Threat Detection and Analysis |
| Log Sources Your SOC Needs for Detection, Forensics, and Hunting | Detection and Monitoring | Threat Detection and Analysis |
| LOLFSaaS - Living off Free SaaS | Detection and Monitoring | Threat Detection and Analysis |
| lolol.farm - curated index of Living Off the Land security research projects | Detection and Monitoring | Threat Detection and Analysis |
| MagicSword integrates LOLExfil and ExtSentry to block exfiltration tools and malicious browser extensions | Detection and Monitoring | Threat Detection and Analysis |
| Making Damn Vulnerable Web Application almost unhackable with Cilium and Tetragon | Detection and Monitoring | Threat Detection and Analysis |
| malcontent - malware and supply-chain risk detection for binaries | Detection and Monitoring | Threat Detection and Analysis |
| Malicious Extension Bot - feed tracking bad browser and IDE extensions | Detection and Monitoring | Threat Detection and Analysis |
| malicious_extension_sentry - auto-updated database of malicious Chrome and Edge extensions | Detection and Monitoring | Threat Detection and Analysis |
| Merklemap - DNS records database | Detection and Monitoring | Threat Detection and Analysis |
| Michael Haag on webshell testing for defenders - Apache and IIS builder tools to validate detections | Detection and Monitoring | Threat Detection and Analysis |
| msInvader - M365 and Azure adversary simulation tool for blue teams | Detection and Monitoring | Threat Detection and Analysis |
| netwatch - terminal network monitor that names processes and catches malware calling home | Detection and Monitoring | Threat Detection and Analysis |
| NEX - autonomous LLM purple-team agent that finds and closes Splunk detection gaps | Detection and Monitoring | Threat Detection and Analysis |
| Next.js RSC RCE Detection: CVE-2025-55182 and CVE-2025-66478 - Assetnote | Detection and Monitoring | Threat Detection and Analysis |
| NoCat - harmless Netcat lookalike for detection testing | Detection and Monitoring | Threat Detection and Analysis |
| Nzyme - WiFi, Bluetooth and Ethernet intrusion detection | Detection and Monitoring | Threat Detection and Analysis |
| OdinEye public beta - one-liner scan to answer 'Is this computer compromised?' | Detection and Monitoring | Threat Detection and Analysis |
| oryx - TUI for sniffing network traffic using eBPF on Linux | Detection and Monitoring | Threat Detection and Analysis |
| osquery - SQL-powered operating system instrumentation for endpoint monitoring | Detection and Monitoring | Threat Detection and Analysis |
| Otterize network-mapper - map Kubernetes pod, Internet and AWS IAM traffic | Detection and Monitoring | Threat Detection and Analysis |
| owLSM - Sigma rules engine inside the Linux kernel using eBPF | Detection and Monitoring | Threat Detection and Analysis |
| Patch Wednesday: Root Cause Analysis with LLMs - PatchDiff-AI multi-agent system | Detection and Monitoring | Threat Detection and Analysis |
| Phoenix - Sigma Rule Intelligence Platform | Detection and Monitoring | Threat Detection and Analysis |
| PingCastle-Notify - monitor PingCastle AD scans and alert on rule diffs via Slack or Teams | Detection and Monitoring | Threat Detection and Analysis |
| Pitfalls of relying on eBPF for security monitoring, and some solutions | Detection and Monitoring | Threat Detection and Analysis |
| pktz - eBPF network traffic monitor per process | Detection and Monitoring | Threat Detection and Analysis |
| PromptLock ransomware prompt - gist of the AI-powered malware's LLM prompt | Detection and Monitoring | Threat Detection and Analysis |
| RansomLook - open ransomware group intelligence | Detection and Monitoring | Threat Detection and Analysis |
| Recent CrowdStrike Outage Emphasizes the Need for eBPF-Based Sensors | Detection and Monitoring | Threat Detection and Analysis |
| Relishing new Fickling features for securing ML systems | Detection and Monitoring | Threat Detection and Analysis |
| Renzon: OpenAI Computer History is a new DFIR artifact class, parsed by IRFlow-Timeline | Detection and Monitoring | Threat Detection and Analysis |
| Rob T. Lee announces Find Evil, an autonomous AI hackathon for incident response using Protocol SIFT and MCP | Detection and Monitoring | Threat Detection and Analysis |
| Ruben Groenewoud on Linux malware disguising as kernel worker threads | Detection and Monitoring | Threat Detection and Analysis |
| RustNet - per-process network monitoring with deep packet inspection, sandboxed | Detection and Monitoring | Threat Detection and Analysis |
| Security-Detections-MCP - MCP server for querying Sigma, Splunk, Elastic, KQL and CrowdStrike detection rules | Detection and Monitoring | Threat Detection and Analysis |
| security-investigator - automated security investigations with Copilot, Agent Skills and Microsoft MCP servers | Detection and Monitoring | Threat Detection and Analysis |
| SecurityClaw - autonomous LLM-powered SOC agent | Detection and Monitoring | Threat Detection and Analysis |
| SharkMCP - MCP server exposing Wireshark sharkd for LLM PCAP analysis | Detection and Monitoring | Threat Detection and Analysis |
| SIEMTriage - AI SOC triage agent for Microsoft Sentinel and Defender XDR | Detection and Monitoring | Threat Detection and Analysis |
| sniffnet - network traffic monitoring tool | Detection and Monitoring | Threat Detection and Analysis |
| SquatSquasher - typosquatting domain detector | Detection and Monitoring | Threat Detection and Analysis |
| sshlog - eBPF SSH session monitoring daemon | Detection and Monitoring | Threat Detection and Analysis |
| Stratoshark - Wireshark-style system call and cloud activity analysis tool | Detection and Monitoring | Threat Detection and Analysis |
| Sublime Security launches free Public EML Analyzer for email message analysis | Detection and Monitoring | Threat Detection and Analysis |
| surface-watch - external attack surface monitoring over time | Detection and Monitoring | Threat Detection and Analysis |
| Syd - air-gapped offline AI cybersecurity assistant for Nmap, Volatility, BloodHound and more | Detection and Monitoring | Threat Detection and Analysis |
| Synapse - Vertex Project central intelligence system for threat analyst teams | Detection and Monitoring | Threat Detection and Analysis |
| Synapse Quickstart - threat intelligence analysis platform | Detection and Monitoring | Threat Detection and Analysis |
| Tailpipe - open source SIEM for instant log insights powered by DuckDB | Detection and Monitoring | Threat Detection and Analysis |
| The AMOS infostealer is piggybacking ChatGPT's chat-sharing feature | Detection and Monitoring | Threat Detection and Analysis |
| Theia - pull IOCs from a threat intel report | Detection and Monitoring | Threat Detection and Analysis |
| THINKPOL free Reddit OSINT tools - user lookup, trends and archive search | Detection and Monitoring | Threat Detection and Analysis |
| TwistScan - dnstwist plus urlscan.io for phishing and typosquatting detection | Detection and Monitoring | Threat Detection and Analysis |
| VanGuard - cross-platform DFIR incident response toolkit | Detection and Monitoring | Threat Detection and Analysis |
| Venator - flexible threat detection platform | Detection and Monitoring | Threat Detection and Analysis |
| Venator - threat detection platform LLM module | Detection and Monitoring | Threat Detection and Analysis |
| VirusTotal - malware, URL and domain analysis service | Detection and Monitoring | Threat Detection and Analysis |
| Vulnerability Spoiler Alert - AI-powered early warning for open-source security patches | Detection and Monitoring | Threat Detection and Analysis |
| What framing security alerts as a binary true or false positive is costing you | Detection and Monitoring | Threat Detection and Analysis |
| When AI infrastructure becomes the target: Securing gateways and control points | Detection and Monitoring | Threat Detection and Analysis |
| WhoYouCalling - per-process network activity monitoring and packet capture for Windows | Detection and Monitoring | Threat Detection and Analysis |
| Windows Security Events Reference | Detection and Monitoring | Threat Detection and Analysis |
| WireMCP - Wireshark MCP server for LLM network traffic analysis | Detection and Monitoring | Threat Detection and Analysis |
| Wiz Cloud Threat Landscape - cloud security incidents, actors and techniques database | Detection and Monitoring | Threat Detection and Analysis |
| YetiHunter - hunt for evidence of compromise in Snowflake environments | Detection and Monitoring | Threat Detection and Analysis |
| Young Domain Guard - browser extension warning on recently registered domains | Detection and Monitoring | Threat Detection and Analysis |
| ZettelForge - agentic memory for cyber threat intelligence with MCP server | Detection and Monitoring | Threat Detection and Analysis |
| Making frontier cybersecurity capabilities available to defenders | Detection and Monitoring | Security Code Review |
| #ai #llm #security #audit - Kevin J. - 21 comments | Detection and Monitoring | Security Code Review |
| A prompt that finds deep logic bugs, and the pipeline we built around it | Detection and Monitoring | Security Code Review |
| An AI harness found a container escape in HashiCorp Nomad, CVE-2026-14891 | Detection and Monitoring | Security Code Review |
| auditician - automated security auditing for Claude Code | Detection and Monitoring | Security Code Review |
| Behind the Scenes Hardening Firefox with Claude Mythos Preview | Detection and Monitoring | Security Code Review |
| bug-hunter - adversarial AI bug hunter and auto-fix skill for coding agents | Detection and Monitoring | Security Code Review |
| Building a Practical Secure Code Review Process | Detection and Monitoring | Security Code Review |
| Claude Code security-guidance plugin: catch security issues as Claude writes code | Detection and Monitoring | Security Code Review |
| Cursor Security Agents | Detection and Monitoring | Security Code Review |
| Cursor Security Review - always-on AI agents for PR review and vulnerability scanning | Detection and Monitoring | Security Code Review |
| Leveling Up Secure Code Reviews with Claude Code | Detection and Monitoring | Security Code Review |
| Mantis - security review skills toolkit for AI coding agents | Detection and Monitoring | Security Code Review |
| MindFort security-skills - security skills for AI coding agents | Detection and Monitoring | Security Code Review |
| PoiEx - VS Code extension for IaC security code review | Detection and Monitoring | Security Code Review |
| quokka - CLI for LLM-assisted security code review | Detection and Monitoring | Security Code Review |
| Ramp Labs - Finding high-severity security issues with publicly available models | Detection and Monitoring | Security Code Review |
| raptor-loop-hunt - autonomous vulnerability hunt Claude Code skill | Detection and Monitoring | Security Code Review |
| Read code like a pro with our weAudit VSCode extension | Detection and Monitoring | Security Code Review |
| Security Context - mines repo history and CVEs to point AI agents at likely vulnerabilities | Detection and Monitoring | Security Code Review |
| security-audit-skill - Cloudflare's coding-agent skill for multi-phase security audits | Detection and Monitoring | Security Code Review |
| Staying Ahead of Adversarial AI Through Agentic Source Code Review | Detection and Monitoring | Security Code Review |
| The Ceiling for DIY Security Reviews | Detection and Monitoring | Security Code Review |
| Unearned Confidence: AI Security Reviewers Don't Really Get It | Detection and Monitoring | Security Code Review |
| V12 - AI security agent for mission critical code | Detection and Monitoring | Security Code Review |