Tools for blue team

Agentic detection and response for securing enterprise AI agents.

Make a system look as if it was hit by an APT.

Navigate and annotate MITRE ATT&CK.

Python library for machine-learning security.

Policy enforcement, sandboxing and audit for autonomous AI agents

Open-source API security testing and discovery platform

Safely simulate malicious network traffic.

AI-driven high-interaction deception honeypot platform.

Proof-of-work web firewall that blocks abusive AI scraper bots.

File triage and malware analysis pipeline.

CLI malware scanner for binaries, source and scripts.

Small, portable ATT&CK detection tests.

Single sign-on and multi-factor authentication portal for web apps.

Cloud forensics for Azure / O365.

Web-based SSH bastion and key manager.

Active Directory attack-path graphing.

Sandbox that restricts what AI agents can execute, read, write and reach.

Cloud-native open-source WAF.

Malware sandbox + payload extraction.

CISA's DFIR tool.

Tripwire tokens for free.

Hunt across Windows event logs at speed.

Visualize AWS environments.

Observable analysis engine for TheHive.