AI and security are starting to converge in more practical ways. This year’s Black Hat Europe Arsenal shows that trend clearly, and this article introduces 8 open-source tools that reflect the main areas of focus. Here’s a preview of the 8 tools mentioned in the article:
| Name (Sorted by Official Website) | Positioning | Features & Core Functions | Source Code | 
|---|---|---|---|
| A.I.G. (AI-Infra-Guard) | AI Security Risk Self-Assessment | Rapidly scans AI infrastructure and MCP service vulnerabilities, performs large model security check-ups (LLM jailbreak evaluation), features a comprehensive front-end interface, and has 1800+ GitHub Stars. | https://github.com/Tencent/AI-Infra-Guard | 
| Harbinger | AI-Driven Red Team Platform | Leverages AI for automated operations, decision support, and report generation to enhance red team efficiency. 100+ GitHub Stars. | https://github.com/mandiant/harbinger | 
| MIPSEval | LLM Conversational Security Evaluation | Focuses on evaluating the security of LLMs in multi-turn conversations, detecting vulnerabilities and unsafe behaviors that may arise during sustained interaction. | https://github.com/stratosphereips/MIPSEval | 
| Patch Wednesday | AI-Assisted Vulnerability Remediation | Uses a privately deployed LLM to automatically generate patches based on CVE descriptions and code context, accelerating the vulnerability remediation process. | Pending Open Source | 
| Red AI Range (RAR) | AI Security Cyber Range | Provides a deployable virtual environment for practicing and evaluating attack and defense techniques against AI/ML systems. | https://github.com/ErdemOzgen/RedAiRange | 
| OpenSource Security LLM | Open Source Security LLM Application | How to train (fine-tune) small-parameter open-source LLMs to perform security tasks such as threat modeling and code review. | Pending Open Source | 
| SPIKEE | Prompt Injection Evaluation Toolkit | A simple, modular tool for evaluating and exploiting prompt injection vulnerabilities in Large Language Models (LLMs). | https://github.com/ReversecLabs/spikee | 
| SQL Data Guard | LLM Database Interaction Security | Deployed inline or via MCP (Model-in-the-Middle Context Protocol) to protect the security of LLM-database interactions and prevent data leakage. | https://github.com/ThalesGroup/sql-data-guard | 
Click to Open Code Editor