|
Sigil — AI Agent Supply Chain Security Scanner
Sigil scans npm, PyPI, and MCP server packages for supply chain threats before they execute. Eight-phase static analysis with quarantine. Free CLI, MCP serve...
|
83 % |
|
safenpm — Sandboxed npm installs
Drop-in npm install replacement that sandboxes postinstall scripts, catches supply-chain attacks, and shares alerts across a decentralized threat intelligenc...
|
82 % |
|
ShadowCanopy — Know exactly what your AI installs
AI assistants install packages you never chose. ShadowCanopy blocks every dependency by default across npm, PyPI, crates, Go, RubyGems and more — and only le...
|
82 % |
|
mShield | Dependency Security & Package Policy Enforcement
mShield enforces security and license policy on package requests before dependencies reach developer machines and CI runners. It records every decision and e...
|
81 % |
|
watchlog – server health & security monitor
Managed monitoring service for Linux servers. 12 checks every 4 hours, Telegram bot with action buttons, REST API, native mobile app. Tap a notification, the...
|
81 % |
|
SCDLP — Supply Chain DLP for macOS
SCDLP is a macOS Endpoint Security extension that blocks unknown processes from reading your credentials and secrets — stopping supply-chain exfiltration in...
|
81 % |
|
stillrunning — Supply chain security for teams without security teams
Supply chain security that stops North Korean malware before it runs. Static analysis, guard daemon, npm/pip intercept. Running 24/7 on real infrastructure.
|
80 % |
|
safescript — A programming language for AI agents that doesn't require code review
A Turing-incomplete subset of JavaScript, designed for easy static verification. Provably safe, immune to supply chain attacks, and ready to run in-process w...
|
80 % |
|
DepWall — npm install guardrail & supply-chain firewall for AI agents
DepWall is an install-time guardrail for AI coding agents: it inspects every npm package before it installs — slopsquatting, poisoned lockfiles, and prompt-i...
|
80 % |
|
Ship Safe — AI Agent Security Scanner for Developers
29 AI security agents scan your codebase for LLM vulnerabilities, MCP configuration security issues, RAG poisoning, Claude Managed Agent misconfigs, secrets,...
|
80 % |
|
Atomdrift - probably the world's best malware detection stack. - The Atomdrift Project
Open-source, local-first supply-chain attack detection across binaries, packages, scripts, and source — Apache 2.0.
|
79 % |
|
RingZero — MCP & dependency security
Scan MCP configurations and software dependencies. Trace risks across large Gradle builds to the modules and teams that introduce them.
|
79 % |
|
Your analysts stop triaging Dependabot | pkgwarden
pkgwarden gate screens every package version for malware before your tools can resolve it, and opens one reviewable PR per lockfile to clear your vulnerabili...
|
79 % |
|
fend - sandbox npm install
A sandboxed runtime for npm install and friends. Project deps execute in a micro-VM with zero access to your home directory.
|
79 % |
|
Pulrix — Quality Scores for Every MCP Server
The search engine and trust layer for AI agent tools. Quality scores, security scanning, and discovery for 17,000+ MCP servers.
|
79 % |
|
Pulrix — Quality Scores for Every MCP Server
The search engine and trust layer for AI agent tools. Quality scores, security scanning, and discovery for 17,000+ MCP servers.
|
79 % |
|
Application Security for Developers | AppSec Brief
Application security intelligence for developers and AppSec teams — vulnerability analysis, secure coding guidance, and supply chain security.
|
79 % |
|
pkgxray: analyze packages before you install them
Supply-chain security for npm packages, MCP servers, and AI agents. No dependencies, runs locally, and static scans never execute package code.
|
79 % |
|
Netsdk Software - Main - Software Development Company. TntDrive, RdpGuard, CS Browser
Netsdk Software - Main - Software Development Company. TntDrive, RdpGuard, CS Browser
|
78 % |
|
RepoD — Secure your software supply chain
RepoD validates, signs, distributes and audits every DEB, RPM, APK, Maven, npm and PyPI package before it reaches your servers. Built-in CVE scanning, CISO a...
|
78 % |
Detected social media networks