Granite Guardian

IBM Granite is a family of foundation models developed by IBM for enterprise AI applications, including language and code models for text generation, summarization, question answering, language understanding, and software-development tasks. The models can be combined in multi-model systems that route simpler requests to smaller, lower-cost models and more complex requests to larger ones. They are distributed for local and hosted AI applications through model repositories and enterprise platforms, with several releases available under the Apache 2.0 license.

PentAGI is a self-hosted, AI-powered penetration-testing platform for security professionals, researchers, and ethical hackers. It uses a multi-agent system with specialized researcher, developer, executor, adviser, planner, and reflector roles to investigate targets, plan and execute testing tasks, operate professional security tools, and generate vulnerability reports. The platform runs operations in isolated Docker containers and includes more than 20 security tools, an isolated web scraper, external search integrations, PostgreSQL with pgvector for persistent results and semantic memory, and an optional Graphiti/Neo4j knowledge graph. Its agents use long-term, working, and episodic memory; chain summarization converts conversation chains into a structured ChainAST, summarizes older sections and oversized pairs, and rebuilds the chain when the result is smaller. Optional execution monitoring detects repeated or excessive tool calls and invokes a mentor for alternative strategies, while task planning decomposes a request into actionable subtasks before specialist agents execute it. PentAGI provides a React and TypeScript web interface, Go-based REST and GraphQL APIs with Bearer-token authentication, flow-scoped file management, Markdown and PDF report downloads, and monitoring integrations built around OpenTelemetry, Grafana, VictoriaMetrics, Jaeger, and Loki. It supports multiple hosted and local LLM providers, including OpenAI, Anthropic, Google Gemini, AWS Bedrock, Ollama, DeepSeek, GLM, Kimi, Qwen, and MiniMax, and can be deployed with Docker Compose or Podman. The project states that it is an autonomous and assistant-guided penetration-testing platform rather than a CALDERA-style breach-and-attack-simulation system with predefined campaigns; testing should be limited to systems for which the operator has authorization.

OpenGeni is an open-source, self-hostable runtime for long-running AI agents rather than an agent itself. It exposes a session-based API for creating, steering, observing, interrupting, and replaying agent runs, storing every event in a PostgreSQL log and streaming live history over SSE so sessions can be resumed or audited. Sessions can run in managed sandboxes or on enrolled Connected Machines such as laptops, build servers, and GPU systems; machine connections are outbound-only and can be revoked. The runtime includes human approval gates for tool use and proposed curated memories, per-session credential brokering, durable pauses for structured responses, and an audit trail. Its control plane, sessions API, web app, and deployment artifacts are distributed under the Apache-2.0 license.

Cloudflare OS is an open-source AI productivity environment developed by Cloudflare and built on Cloudflare Workers. It provides an agent chat interface preloaded with company-specific knowledge, sandboxed development of shareable applications called gadgets, and a security framework called Gatekeepers for controlling agents and apps. It is intended to be customized into an organization's own company operating environment rather than adopted unchanged as a traditional computer operating system. Each user receives a private, separately sandboxed instance of a productivity application, such as a slide-deck tool, whiteboard, game, or dashboard. Agents can create and modify these gadgets and perform tasks involving configured company systems and integrations. Gatekeepers are service-specific Workers that expose a Cap'n Web API, handle authorization such as OAuth, restrict access to the intended resource, log gadget and agent actions, and support human approval for side effects. Instead of stopping synchronously for approval, a Gatekeeper can simulate the outcome locally, let the agent continue and queue actions, then allow the user to approve or reject those actions later in bulk or individually. The full stack can be run locally with pnpm, Wrangler, and workerd using `pnpm run-local`, or deployed to a Cloudflare account. The repository describes the project as an early-access release under heavy development; the local setup is intended for evaluation rather than production use.

Warpgate is a self-hosted, transparent bastion and privileged-access-management system for SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP, and VNC. Deployed on a bastion or DMZ host, it assigns users to specific hosts and URLs and forwards connections directly to their targets without requiring client-side software, SSH wrappers, or custom clients. Native clients remain compatible, while browser-based SSH, RDP, and VNC access is also provided. Warpgate records sessions for live viewing and later replay through an administrative web UI, with command-level auditing. It includes TOTP two-factor authentication, OpenID Connect single sign-on, temporary access tickets, brute-force protection with IP blocking and user lockout, and is distributed as a dependency-free single binary written in Rust.