Best Security & Guardrails Top 20
Top 20 most popular open-source Security & Guardrails projects, ranked by GitHub Stars.
Anthropic Cybersecurity Skills
28.0k Stars754 structured cybersecurity skills for AI agents mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND and NIST AI RMF. Works with Claude Code, Codex CLI, Cursor, Gemini CLI and 20+ platforms.
Promptfoo
24.3k StarsTest and evaluate LLM prompts, agents, and RAG pipelines. Built-in red teaming and security evaluation for reliable AI applications.
PentAGI
21.9k StarsFully autonomous AI Agents system capable of performing complex penetration testing tasks using multi-agent architecture with support for multiple LLM providers.
SWE-agent
20.1k StarsSWE-agent takes a GitHub issue and automatically generates fixes using your LLM of choice, also applicable to cybersecurity auditing and competitive coding. NeurIPS 2024 paper.
OpenAI Evals
19.2k StarsOpenAI's framework for evaluating LLMs and LLM systems, providing an open-source registry of benchmarks and tools for systematic model assessment.
PentestGPT
14.9k StarsAn automated penetration testing agentic framework powered by large language models for security testing and vulnerability discovery.
SkillSpector
14.7k StarsNVIDIA's SkillSpector inspects and evaluates the tool-use and function-calling skills of LLM agents against safety, correctness, and performance criteria.
OpenSandbox
13.9k StarsOpenSandbox is an open-source, secure, fast, and extensible sandbox runtime for AI agents, developed by Alibaba.
E2B
13.4k StarsE2B provides secure cloud sandboxes for AI agents, supporting code execution, file operations, and isolated compute as an execution layer for coding and automation workflows.
Portkey AI Gateway
12.7k StarsPortkey AI Gateway is a blazing fast AI gateway with integrated guardrails, routing to 200+ LLMs with 50+ AI guardrails through a single fast and friendly API.
HexStrike AI
11.1k StarsHexStrike AI is an advanced MCP server that lets AI agents autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, and security research.
Presidio
10.5k StarsMicrosoft's open-source context-aware PII detection and de-identification SDK for text, images, and structured data, providing sensitive data protection for LLM applications and agents.
GhidraMCP
9.8k StarsMCP server for Ghidra reverse engineering platform, enabling AI agents to autonomously perform binary analysis and vulnerability discovery.
CAI
9.7k StarsAlias Robotics' open-source AI security research agent framework for multi-agent orchestration of cybersecurity tasks, integrating 300+ AI models, designed for red-team operations and security research.
Garak
8.8k StarsNVIDIA's open-source LLM vulnerability scanner that automatically detects security issues in language models including safety vulnerabilities, hallucination tendencies, jailbreak risks, and prompt injection attacks.
OpenShell
8.2k StarsOpenShell is the safe, private runtime for autonomous AI agents, developed by NVIDIA. Provides controlled execution environments and resource management.
Microsandbox
7.6k StarsSecure, local, cross-platform and programmable sandboxes for AI agents. Provides strict resource isolation using microVM technology.
Guardrails AI
7.3k StarsGuardrails AI adds programmable guardrails to large language models, ensuring reliability and safety through input/output validation, structured data extraction, and custom validators.
NeMo Guardrails
7.0k StarsNVIDIA NeMo Guardrails is an open-source toolkit for adding programmable guardrails to LLM-based conversational systems, supporting topic control, safety enforcement, and dialog guidance.
Superagent
6.7k StarsSuperagent protects AI applications against prompt injections, data leaks, and harmful outputs, embedding safety directly into your app.
Related Articles
Agent Evaluation and Testing: From Vibe Checks to End-to-End Pipelines
Most teams evaluate agents by checking a few examples. Real evaluation needs layered metrics, non-rotting datasets, and judges that push back. This article provides runnable code patterns and a practical decision framework.
Agent Hallucination Defense: Practical Mitigation Patterns Beyond Guardrails
Why do LLM agents hallucinate? This article traces root causes and systematically reviews practical mitigation patterns: retrieval augmentation, confidence scoring, multi-agent cross-validation, forced citation backtracking, and observability with UpTrain, Giskard, RagaAI Catalyst, Comet Opik, and NVIDIA Garak.
Agent Prompt Injection Defense: OWASP LLM01 in Practice
Based on OWASP LLM Top 10 engineering practice, this article systematically explains the seven layers of defense-in-depth for agent prompt injection: input sanitization, instruction isolation, least-privilege, output auditing, guardrails frameworks, continuous red-teaming, and kill switches -- with actionable code and toolchains.