Tool for building Kubernetes attack paths

[TDSC 2021] IntruSion alert-driven Attack Graph Extractor. https://ieeexplore.ieee.org/document/9557854

A Graph Neural Network-based Intrusion Detection System

Autonomous offensive security agent. Plans engagements, runs recon, chains exploits, and writes reports - end to end. Native to Claude Code, Gemini CLI, Codex and Cursor. Not a scanner wrapper.

Enterprise-grade vulnerability management platform with AI-powered analysis, interactive attack graph visualization (NetworkX), and intelligent chatbot for security consultation. Integrates OpenCTI threat intelligence.

Open-source security intelligence engine for developers. Orchestrates nmap, nikto, semgrep, whatweb, trivy, cortex-crawler & curl. Builds attack graphs, narrates risk, and generates fixes. Runs fully locally, without any cost

AAPP‑MART is an open-source cybersecurity engine for offensive security, AI-powered attack path prediction, autonomous red team simulation, automated threat modeling, adversary emulation, attack graph analysis, exposure management, vulnerability assessment, cyber risk assessment, risk scoring, and MITRE ATT&CK-aligned security validation.

Real-Time Detection of Multi-Stage Attacks using Kill Chain State Machines: Detect multi-stage attacks by correlating alerts from Intrusion Detection Systems (IDS) to reconstruct attacks. By prioritising alerts based on the kill chain model the RT-KCSM reduces false-positive alerts.

Visual IAM attack graph for AWS. Instantly analyze permissions, detect privilege-escalation risks, and audit IAM roles — locally, securely.

Static + plan-time Terraform security analysis with attack-graph prioritisation, MITRE ATT&CK mapping, and one-click PR fix suggestions. 215 rules, 100% fix_hcl coverage.

Cold Relay is a single-binary Active Directory security assessment tool that collects Windows authentication evidence across LDAP, Kerberos, SMB, DNS, GPO, delegation, certificate services, and more turning evidence into deterministic findings with an offline attack graph.

Shadow Blade - A tool to interact with attack graphs

BloodHound for AI agents - graph-native capability reachability analysis for MCP and agentic AI systems

Lightweight Autonomous Intrusion Detection and Response System — real-time packet capture, adaptive baseline learning, micro-honeypot deception layer, causal attack graphs, and explainable automated blocking for small-scale networks.

Maps real test paths from packaged apps: footholds, persistence, and lateral hooks. You finish chains instead of drowning in noise.

ARES security assessment platform

Neuro-symbolic RL agent that learns to pentest networks it has never seen — GPT-4o compiles CVE preconditions into a Z3 action mask over a GraphSAGE PPO policy. Zero-shot attack-graph transfer, negatives disclosed.

AWS exploit chain prover, finds cross-service privilege escalation paths