Pinned Loading

1. llm-c4-controls llm-c4-controls Public

   C4 (PlantUML) controls for where private data leaks in AI systems: analyzers, tokenizers, semantic search, RAG, supply chain, post-usage alerting. OWASP GenAI LLM Top 10 (2026) mapped.

2. OmniBOM OmniBOM Public

   A powerful CLI tool for CI to intelligently analyzing build environments and generating Software Bill of Materials (SBOM) with automatic build system detection.

   Java

3. AutoTriage AutoTriage Public

   AutoTriage is the control plane that turns findings from scanners and security agents into governed, reviewable and auditable decisions.

   Java 1

4. ADR ADR Public

   Forked from uber/ADR

   ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.

   Python

5. appsec-cost-simulator appsec-cost-simulator Public

   Interactive AppSec cost simulator comparing traditional SAST, LLM scanning in every CI build, and SAST with reusable AI-generated suppression rules.

   HTML