Ingests and normalizes security telemetry, runs multi-model AI agents to produce replayable investigations and automated triage/response; key features include a step-by-step Investigation Ledger, CI-gated eval harness, and self-hostable deployments.
Generates production-ready offensive-security artifacts from prompts—Nuclei templates, CVE PoCs, exploit scripts and pentest tooling—fine-tuned on bug-bounty reports and CVE writeups and quantized for consumer/server GPU deployment.
Routes code-based AI agents through repeatable reverse-engineering and pentesting workflows and orchestrates local and remote tools (jadx, Frida, IDA, BurpSuite) so agents can triage APKs, binaries, JS, firmware, and CTFs without guessing the toolchain. Includes master routing rules, tool-index detection, MCP integration, and a field-journal for reusable lessons.
25,000 chat-formatted synthetic SFT examples distilled to emulate the reasoning style and agentic behavior of Anthropic's Claude Mythos, focused on cybersecurity, advanced coding, mathematical reasoning, and long-horizon agent tasks. Includes metadata for targeted curriculum fine-tuning and is Apache-2.0 licensed.
Provides a locally runnable 26.9B Qwen3.6 checkpoint that surgically reduces refusal behavior in weight space while preserving capability; ships bfloat16 safetensors and a GGUF quant ladder for local runtimes and red-team evaluation.
Runs a multi-stage, Claude-powered pipeline to find, verify, triage, and generate patches for code vulnerabilities, plus interactive skills for threat modeling and customization. Default harness targets C/C++ memory bugs using ASAN inside Docker/gVisor; autonomous runs execute target code and require sandboxing.
Local-first AI agent workspace for authoring, running, and recovering agent executions — records model messages, tool calls, tool results, permission decisions, and termination events in an append-only Runtime Event Log. Provides Desktop (Electron), TUI/CLI, and headless Eval surfaces plus local tools and runtime features for pruning, compaction, and durable recovery.
Provides a sanitized, MIT‑licensed dataset of scanner evidence and registry verdicts for public ClawHub agent skills — 67k+ latest skill versions with redacted artifacts and structured VirusTotal, static-analysis, and SkillSpector outputs to study scanner disagreement and agent-skill risk governance.
A 16 GB, 507-file PhD‑level cybersecurity knowledge base for training and evaluating security-focused LLMs and automation. Covers offensive/defensive/forensics/cloud/iot and AI-security across 30+ domains with real-world labs and framework mappings.
Provides 462 unrestricted long-form chain-of-thought reasoning traces distilled from the full Mythos V2 model (≈104.7M characters); intended for long-context evaluation, trace analysis and process-level supervision. License unknown—verify before reuse.
A surgically modified Gemma 4 (12B) that removes refusal behavior while preserving benchmark parity; released as an uncensored research artifact with GGUF quantizations for local inference and red‑team/alignment evaluation.
Provides a token-level benchmark for Russian PII detection and NER, with 2,841 sentences and 5,614 annotated spans across 21 fine-grained entity types in BIO format. Mixes sanitized production-log examples, synthetic document templates, and hard negatives to evaluate guardrails and anonymization pipelines.