Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Cloud Native Runtime Security
Linux Runtime Security and Forensics using eBPF
tirreno is a security framework. Event tracking, threat detection, and risk scoring for any product.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.
ebpfkit is a rootkit powered by eBPF
Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS code.
Open-source runtime AI agent security tool - monitors and controls AI agents, catching malicious tool use, prompt injection, and policy drift in real time, before the agent acts.
OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
ANOLISA (Agentic Nexus Operating Layer & Interface System Architecture)
Deep Linux runtime visibility meets Wireshark
Open-source eBPF runtime security sensor for GitHub Actions and GitLab CI/CD.
Deep research for your infra. Cynative runs frontier models across your code, cloud and runtime - reasoning through GitHub, GitLab, AWS, GCP, Azure and Kubernetes as one system - and comes back with verified answers.
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Run AI harnesses like Claude Code, Codex, Copilot, Antigravity, and Omnigent in disposable workspace forks. Review, merge, or roll back changes with policy enforcement and provenance.
🐝 BPFBox 📦 Exploring process confinement in eBPF
Runtime enforcement boundary for AI agents: a local sidecar that gates every outbound call against Cedar policies you own. Deterministic, call-level, no model on the hot path
Add a description, image, and links to the runtime-security topic page so that developers can more easily learn about it.
To associate your repository with the runtime-security topic, visit your repo's landing page and select "manage topics."