A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.
Prevent merging of malicious code in pull requests
Ask Codex, Gemini, Grok, and 400+ OpenRouter models (Qwen, Kimi, DeepSeek) for second opinions or arbiter-mediated consensus. One MCP server for Claude Code, Codex, Cursor, Kiro, OpenCode. Measures which models earn their seat.
Trace-backed Agent Authorization Reviews for tool-using AI agents. Staging-only evidence for payment, record-change, access, and export actions.
📚 Overview 🔒 Tooling 🔒 Process 🔒 Physical 🔒 People 📚
📚 VPS 🔒 Network 🔒 Cloud 🔒 Web Applications 📚
AI-powered whitebox penetration testing plugin for Claude Code. 9 languages, 22 skills, 7 autonomous agents. STRIDE threat modeling, OWASP 2025 coverage, polyglot monorepo support.
My Blockchain auditing service
Reviews and tests of security products
ACS (Agnostic Config Suites) — AI coding agent skill system. 25+ auto-activating skills for Claude Code, Hermes, Kiro, Codex. Spec-driven dev, TDD, security review, architecture blueprints. One install, all agents upgraded.
📚 IoT 🔒 Mobile 📚
Spec-Kit extension for secure-by-design security reviews of full projects, staged changes, branches/PRs, plans, tasks, and follow-up actions
Michael Adams — security specialist agent for Claude Code with persistent memory, STRIDE threat modeling, and OWASP framework mappings.
A marketplace of Claude Code plugins for adversarial security and architectural code review.
A Claude / AI security review prompt for shipping safe apps. TRAP (True Readiness Audit Prompt) turns Claude Code, Cursor, or Copilot into an adversarial, evidence-first security & production-readiness audit of your own codebase.
White-box AI code security review for Claude/Codex: offline scanner, review packs, SARIF, and report merging.
4-Phase Quality Gate System for Claude Code, Codex CLI & Gemini CLI — structured spec/design/code/release reviews with parallel security audit
security audits by Tenset Security
Council skill for Codex, Claude Code, and AI coding agents: expert review before coding, architecture decisions, refactors, and debugging.
MCP quality gate for AI coding agents to prevent sloppy apps, websites, SaaS projects, and unsafe AI-generated code.
Add a description, image, and links to the security-review topic page so that developers can more easily learn about it.
To associate your repository with the security-review topic, visit your repo's landing page and select "manage topics."