5GitHub Trending (AI/LLM filtered)·
Strix: open-source AI-powered vulnerability detection and remediation tool
Strix is an open-source Python tool that uses AI to automatically find and fix security vulnerabilities in applications. The project has accumulated 26,502 GitHub stars with 88 added today, indicating significant community traction. It sits at the intersection of AI-assisted security tooling and automated code remediation.
Related guides (2)
Related events (8)
HexStrike AI: MCP server exposing 150+ cybersecurity tools to AI agents
HexStrike AI is an open-source MCP server that enables AI agents (Claude, GPT, Copilot, and others) to autonomously invoke over 150 offensive security tools for penetration testing, vulnerability discovery, and bug bounty automation. The project bridges LLMs with real-world offensive security capabilities via the Model Context Protocol. With 9,221 GitHub stars, it represents a notable community signal around agentic security tooling and the expanding attack surface of AI-driven automation.
Deep Eye: Multi-Provider AI-Orchestrated Vulnerability Scanner
Deep Eye is an open-source Python tool that orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, Ollama, Groq, Mistral, and others) to generate attack payloads and scan targets for 45+ vulnerability types. It produces professional security reports with compliance mapping. The project has accumulated 1,572 GitHub stars with 42 added today, indicating growing community interest in AI-augmented offensive security tooling.
Anthropic Launches Claude Code Security: AI-Powered Vulnerability Detection for Defenders
Anthropic has released Claude Code Security in limited research preview for Enterprise and Team customers, a capability built into Claude Code that scans codebases for security vulnerabilities and suggests patches for human review. Unlike rule-based static analysis tools, it uses Claude's reasoning to understand code context, trace data flows, and detect complex vulnerabilities including novel ones. Built on Claude Opus 4.6, the system found over 500 previously undetected vulnerabilities in production open-source codebases during internal research. The release is framed as a defensive measure to put AI-enabled vulnerability discovery in the hands of defenders before attackers can exploit the same capabilities.
NVIDIA releases SkillSpector: security scanner for AI agent skills
NVIDIA has published SkillSpector, an open-source Python tool for scanning AI agent skills to detect vulnerabilities, malicious patterns, and security risks. The repository is trending on GitHub with 1,920 total stars and 280 added today. The tool addresses an emerging security concern as agentic AI systems proliferate and third-party skill/tool ecosystems grow.
Codex Security: now in research preview
OpenAI has launched Codex Security in research preview, an AI-powered application security agent. It analyzes project context to detect, validate, and patch complex vulnerabilities with the goal of higher confidence and reduced false-positive noise compared to traditional tools. The product extends OpenAI's Codex brand into the security domain.
Open-weight LLMs evaluated for generating structured threat intelligence (STIX) for autonomous vehicle vulnerabilities
Researchers introduce CAV-STIXGen, a dataset mapping connected and autonomous vehicle (CAV) CVE descriptions to STIX threat intelligence objects, CWE entries, and MITRE ATT&CK techniques. They benchmark 11 open-weight LLMs (4B–120B parameters) across prompting strategies, achieving F1 scores up to 0.94 for STIX domain objects and 0.99 for CWE mapping, while MITRE ATT&CK mapping remains harder. A multi-agent configuration using Gemma-4-31B and Codestral-22B is also evaluated, and co-occurrence analysis of CWE/ATT&CK patterns is used to surface recurring threat patterns in the CAV domain.
OpenAI launches 'Patch the Planet' initiative to support open-source security with AI
OpenAI announced Patch the Planet, a program under its Daybreak initiative aimed at helping open-source maintainers identify, validate, and remediate security vulnerabilities using AI tools combined with expert review. The initiative targets the open-source software supply chain security problem. It represents OpenAI applying AI capabilities to a concrete cybersecurity use case at scale.
Stripe releases open-source AI toolkit for building AI-powered products
Stripe has published an open-source TypeScript repository ('stripe/ai') described as a one-stop shop for building AI-powered products and businesses using Stripe. The repository has accumulated 1,675 stars on GitHub. This signals Stripe's move to provide developer tooling at the intersection of AI and payments infrastructure.