Documentation

Open-source security platform for AI agents. Pick a tool to get started.

New here? Start with the CLI. One command to scan, protect, and monitor.

npx opena2a-cli init

Scan & Fix

Find vulnerabilities, test defenses, and protect credentials

Unified security platform. Scan, protect, monitor, and detect Shadow AI agents and MCP servers.

Security scanner, red-team toolkit, OASB benchmark, and runtime protection. 147 security checks with auto-fix.

Credential protection for AI tools. Prevents key leakage in LLM contexts.

Agent identity, browser protection, and supply chain trust

Agent Identity Management. Ed25519 identity, trust scoring, MCP security, ABOM.

Chrome extension for detecting and controlling browser-based AI agents.

Agent trust registry and supply chain verification for the OpenA2A ecosystem.

Security training and cryptographic readiness

Damn Vulnerable AI Agent. Intentionally vulnerable agent for security training.

Post-quantum cryptographic readiness. Inventory, assess, and upgrade crypto.

Follow the getting-started guide to find the right tool for your use case.