2 projects
heretic-agent
Autonomous AI agent that finds business-logic vulnerabilities (BOLA/IDOR, price tampering, workflow bypass, data exposure) — Oracle-verified, ~0 false positives
renfield-mcp
Renfield — penetration testing for AI agents: finds and PROVES cross-server confused-deputy exfiltration chains in an MCP tool mesh, measures whether a real LLM falls for them, gates them at runtime, and runs as an MCP server any agent can call.