Tools for blue team

Agentic detection and response for securing enterprise AI agents.

Make a system look as if it was hit by an APT.

Navigate and annotate MITRE ATT&CK.

Policy enforcement, sandboxing and audit for autonomous AI agents

Open-source API security testing and discovery platform

Safely simulate malicious network traffic.

AI-driven high-interaction deception honeypot platform.

File triage and malware analysis pipeline.

Small, portable ATT&CK detection tests.

Cloud forensics for Azure / O365.

Web-based SSH bastion and key manager.

Active Directory attack-path graphing.

Cloud-native open-source WAF.

Malware sandbox + payload extraction.

CISA's DFIR tool.

Tripwire tokens for free.

Hunt across Windows event logs at speed.

Visualize AWS environments.

Observable analysis engine for TheHive.

Medium-interaction SSH/Telnet honeypot.

Deep research agent for cloud and infrastructure security

MCP server exposing 66 dark-web threat-intelligence tools to AI.

Hunt PowerShell attacks in Windows logs.

Blocks destructive shell commands from AI coding agents