# Security developer tools

> 11 developer and vibe-coding tools tagged security in the Digidle Tools directory, across categories, A to Z, each with its official link.

- Tag page: https://digidle.com/tags/security/
- All tags: https://digidle.com/tags/

## Tools (A to Z, not a ranking)

- [Argus](https://digidle.com/tools/argus-secops.md) (Analytics & Monitoring): Open-source (MIT), self-hosted security operations platform: AI agents triage and investigate alerts with read-only tools, while response playbooks start in shadow mode, use reversible actions and can be approved from Slack. Official site: https://github.com/thomasunise/argus.
- [Charter](https://digidle.com/tools/charter.md) (Frameworks & Dev Tools): Open-source (Apache-2.0) Python library for AI agents that act in your customers' accounts through APIs: each tool is a Pydantic model that mirrors the API field by field with your rules on top, every call is validated before it is sent, the customer a call is for comes from your app rather than the model, and the same declarations produce a reviewable map of everything each tool can reach. Runs in your process with no proxy or telemetry; works with any HTTP API. pip install charter-ai. Official site: https://github.com/r28ai/charter.
- [Correct Hooks](https://digidle.com/tools/correct-hooks.md) (Authentication): Open-source (MIT) libraries for TypeScript, Python and Rust that sign and verify webhooks with ed25519 asymmetric signatures and handle key management and rotation; early-stage but usable. Official site: https://github.com/handlewithcarecollective/correct-hooks.
- [CybeDefend](https://digidle.com/tools/cybedefend.md) (Frameworks & Dev Tools): Security and business rules for AI coding agents: one command installs VibeDefend into Claude Code, Cursor, Copilot or Codex to scan each diff and block risky actions, with SAST, SCA, secrets and IaC scanning; free plan. Official site: https://cybedefend.com.
- [Deedglass](https://digidle.com/tools/deedglass.md) (Analytics & Monitoring): Safety layer for AI agents that change databases and health records: rules decide each agent tool call, a check compares what the system really changed with what the agent reported, and each action is sealed as a signed record anyone can verify offline, with a person able to undo it. npx deedglass opens a local app in your browser with no account; works with Claude Code, Cursor, Claude Desktop, VS Code and Postgres. Apache-2.0 core, ee/ under FSL-1.1-ALv2. Official site: https://deedglass.com.
- [Kerno](https://digidle.com/tools/kerno.md) (Analytics & Monitoring): AI runtime QA for backends: tests user flows against your real stack from inside MCP-capable coding agents. Official site: https://kerno.io.
- [Lakera Guard (Check Point AI Guardrails)](https://digidle.com/tools/lakera-guard.md) (Frameworks & Dev Tools): Runtime guardrails API from Lakera, now part of Check Point and sold as Check Point AI Guardrails: one call to the Guard API screens prompts, documents and model output for prompt injection and jailbreaks, PII and data leakage, harmful content and unknown links, with tool allow and deny lists for agents. Free Community plan for 10,000 requests a month; Enterprise adds self-hosting. Official site: https://www.lakera.ai/ai-agent-security.
- [Sourcery](https://digidle.com/tools/sourcery.md) (Frameworks & Dev Tools): AI code review for GitHub and GitLab, including self-managed GitLab: reviews every pull request with summaries, diagrams and one-click fixes, follows your custom review rules, runs security checks, and can auto-approve low-risk PRs. Free on public repos. Official site: https://www.sourcery.ai.
- [The MCP Census](https://digidle.com/tools/mcp-census.md) (Frameworks & Dev Tools): Checks public evidence for an MCP server and returns PASS, REVIEW, BLOCK or UNKNOWN before you install or call it; lookup, preflight, whole .mcp.json config audits, a change feed, REST API and its own MCP endpoint, no account needed for stats. Official site: https://mcpcensus.com.
- [Weir](https://digidle.com/tools/weir.md) (Frameworks & Dev Tools): Open-source (Apache-2.0) API key leak detection for AI agents: plants fake keys where real ones live, runs your agent's flows and reports whether they reached traces, logs, console output, the model or other services (leak, clean or incomplete), and in Claude Code shows which of your real keys entered or left a session, with an optional hook that redacts them. pip install weir-scan. Official site: https://github.com/IdoGol24/weir.
- [withHuman](https://digidle.com/tools/withhuman.md) (AI Editors & Agents): Open-source human approval layer that intercepts AI agent tool calls, applies rules, and routes risky actions to reviewers. Official site: https://withhuman.ai.

---
Source: Digidle Tools (https://digidle.com/), a curated directory of developer and vibe-coding tools. Pricing is not verified by Digidle unless stated in a description; check the official site. Full index: https://digidle.com/llms.txt
