Skip to content
@opena2a-org

opena2a.org

Open-source security for AI agents
README.md

OpenA2A

OpenA2A builds the trust layer for AI agents. Agents now act on people's behalf, calling APIs, querying data, and executing tasks, without the identity, authorization, audit, and trust primitives traditional infrastructure has had for decades. OpenA2A fills that gap with open, self-hostable tools and open standards, vendor-neutral by design, so no single platform owns the layer that verifies its own agents.

Built by and for the developers, security teams, and researchers working on AI agents.

Visit opena2a.org to learn more.

Pinned Loading

  1. damn-vulnerable-ai-agent damn-vulnerable-ai-agent Public

    Damn Vulnerable AI Agent is a deliberately vulnerable AI agent platform for security testing and education.

    JavaScript 144 54

  2. hackmyagent hackmyagent Public

    Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.

    TypeScript 86 16

  3. agent-identity-management agent-identity-management Public

    The IAM layer for AI agents: cryptographic identity, capability authorization, and audit trails for non-human identities.

    Go 67 20

  4. opena2a opena2a Public

    One scan for AI risk. `opena2a review` checks an AI project across credentials, shadow agents, MCP servers, and dependencies, returns a score, and routes each finding to the tool that fixes it. Ope…

    TypeScript 21 8

  5. ai-browserguard ai-browserguard Public

    A firewall for browser agents. Chrome extension that detects, monitors, and controls AI agents in your browser. Identifies Playwright, Puppeteer, Selenium, Anthropic Computer Use, and OpenAI Operat…

    TypeScript 6 2

  6. secretless-ai secretless-ai Public

    One command to keep secrets out of AI (LLMs). Works with Claude Code, Cursor, Copilot, Windsurf, and any AI coding tool.

    TypeScript 26 5

Repositories

Showing 10 of 22 repositories
  • arp-guard Public

    EDR for AI agents. Runtime monitoring, detection and enforcement across agent processes, network, filesystem, and AI-layer traffic.

    opena2a-org/arp-guard's past year of commit activity
    JavaScript 3 Apache-2.0 1 25 0 Updated Oct 22, 2026
  • agent-identity-management Public

    The IAM layer for AI agents: cryptographic identity, capability authorization, and audit trails for non-human identities.

    opena2a-org/agent-identity-management's past year of commit activity
    Go 67 Apache-2.0 20 58 1 Updated Oct 22, 2026
  • ai-trust Public

    VirusTotal for AI packages. ai-trust check <pkg> returns a 0-100 trust score from the OpenA2A Registry trust graph, covering security scans, advisories, and dependency risk. For MCP servers, A2A agents, skills, and LLM packages.

    opena2a-org/ai-trust's past year of commit activity
    TypeScript 3 Apache-2.0 2 34 1 Updated Oct 22, 2026
  • secretless-ai Public

    One command to keep secrets out of AI (LLMs). Works with Claude Code, Cursor, Copilot, Windsurf, and any AI coding tool.

    opena2a-org/secretless-ai's past year of commit activity
    TypeScript 26 Apache-2.0 5 32 4 Updated Oct 22, 2026
  • nanomind Public

    On-device models that detect and classify AI agent attacks. A 2M-param classifier (<1ms, offline) and a 1.7B-param analyst, shipping inside HackMyAgent, Secretless, and the OpenA2A CLI.

    opena2a-org/nanomind's past year of commit activity
    TypeScript 3 Apache-2.0 0 19 1 Updated Oct 22, 2026
  • opena2a Public

    One scan for AI risk. `opena2a review` checks an AI project across credentials, shadow agents, MCP servers, and dependencies, returns a score, and routes each finding to the tool that fixes it. Open source.

    opena2a-org/opena2a's past year of commit activity
    TypeScript 21 Apache-2.0 8 86 15 Updated Oct 22, 2026
  • aicomply Public

    Inline content classifier for AI agent input and output. Detects PII, credentials and regulated data before it is sent to a cloud LLM.

    opena2a-org/aicomply's past year of commit activity
    TypeScript 1 Apache-2.0 2 25 0 Updated Oct 22, 2026
  • ai-browserguard Public

    A firewall for browser agents. Chrome extension that detects, monitors, and controls AI agents in your browser. Identifies Playwright, Puppeteer, Selenium, Anthropic Computer Use, and OpenAI Operator without the agent identifying itself.

    opena2a-org/ai-browserguard's past year of commit activity
    TypeScript 6 Apache-2.0 2 11 0 Updated Oct 22, 2026
  • oasb Public

    Open Agent Security Benchmark - 222 attack scenarios, product-agnostic adapter interface, MITRE ATLAS mapped

    opena2a-org/oasb's past year of commit activity
    JavaScript 10 Apache-2.0 2 39 1 Updated Oct 22, 2026
  • hackmyagent Public

    Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.

    opena2a-org/hackmyagent's past year of commit activity
    TypeScript 86 Apache-2.0 16 202 3 Updated Oct 22, 2026
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Most used topics

Loading…