numasec
starsforks
How to install numasec?
francescostabile/numasec
$git clone https://github.com/FrancescoStabile/numasec---
README.md
| 1 | <h1 align="center">numasec</h1> |
| 2 | |
| 3 | <p align="center"> |
| 4 | <b>The open source AI security agent.</b> |
| 5 | </p> |
| 6 | |
| 7 | <p align="center"> |
| 8 | Give your terminal a security brain. |
| 9 | </p> |
| 10 | |
| 11 | <p align="center"> |
| 12 | Run security workflows with your local tools, agents, runbooks, findings, evidence, replay and reports. |
| 13 | </p> |
| 14 | |
| 15 | <p align="center"> |
| 16 | <code>npm install -g numasec</code> |
| 17 | </p> |
| 18 | |
| 19 | <p align="center"> |
| 20 | <a href="https://github.com/FrancescoStabile/numasec/actions/workflows/ci.yml"><img src="https://img.shields.io/github/actions/workflow/status/FrancescoStabile/numasec/ci.yml?branch=main&style=for-the-badge&label=CI&logo=github" alt="CI"></a> |
| 21 | <a href="https://github.com/FrancescoStabile/numasec/releases"><img src="https://img.shields.io/github/v/release/FrancescoStabile/numasec?include_prereleases&style=for-the-badge&label=release&labelColor=0b0f0a&color=2f81f7" alt="release"></a> |
| 22 | <a href="https://www.npmjs.com/package/numasec"><img src="https://img.shields.io/npm/v/numasec?style=for-the-badge&label=npm&logo=npm&logoColor=white&labelColor=0b0f0a&color=cb3837" alt="npm"></a> |
| 23 | <a href="https://www.npmjs.com/package/numasec"><img src="https://img.shields.io/npm/dm/numasec?style=for-the-badge&color=00c2ff&label=downloads" alt="npm downloads"></a> |
| 24 | <a href="https://github.com/FrancescoStabile/numasec/stargazers"><img src="https://img.shields.io/github/stars/FrancescoStabile/numasec.svg?style=for-the-badge&label=stars&logo=github&logoColor=white&labelColor=0b0f0a&color=f5a524&cacheSeconds=1800" alt="GitHub stars"></a> |
| 25 | <a href="LICENSE"><img src="https://img.shields.io/badge/license-AGPL--3.0--or--later-00c2ff?style=for-the-badge" alt="AGPL-3.0-or-later license"></a> |
| 26 | </p> |
| 27 | |
| 28 | <p align="center"> |
| 29 | <img src="assets/topreadme.png" alt="numasec AI security agent running in the terminal" width="920" /> |
| 30 | </p> |
| 31 | |
| 32 | <p align="center"> |
| 33 | <a href="#demo">Demo</a> | |
| 34 | <a href="#why-numasec">Why</a> | |
| 35 | <a href="#what-it-feels-like">What it feels like</a> | |
| 36 | <a href="#try-it">Try it</a> | |
| 37 | <a href="#what-it-does">What it does</a> | |
| 38 | <a href="#commands">Commands</a> | |
| 39 | <a href="#architecture">Architecture</a> | |
| 40 | <a href="#roadmap">Roadmap</a> |
| 41 | </p> |
| 42 | |
| 43 | --- |
| 44 | |
| 45 | ## What is numasec? |
| 46 | |
| 47 | numasec is an AI security agent that runs in your terminal. |
| 48 | |
| 49 | It uses the tools already installed on your machine, follows security runbooks, switches between cyber agents, keeps the operation context alive, tracks findings, stores evidence and helps turn the work into reports. |
| 50 | |
| 51 | It is built for people who already live between shell, browser, HTTP requests, scanners, advisories, notes and reports. |
| 52 | |
| 53 | - Not a chatbot. |
| 54 | - Not a scanner wrapper. |
| 55 | - Not a Burp or Kali replacement. |
| 56 | |
| 57 | A security agent for the workflow you already have. |
| 58 | |
| 59 | ## Demo |
| 60 | |
| 61 | <p align="center"> |
| 62 | <a href="assets/demo.mp4"> |
| 63 | <img src="assets/demo-preview.gif" alt="numasec running a scoped security operation from the terminal" width="940" /> |
| 64 | </a> |
| 65 | <br /> |
| 66 | <sub>Click the preview for the full terminal recording.</sub> |
| 67 | </p> |
| 68 | |
| 69 | ## Why numasec |
| 70 | |
| 71 | Security work does not happen in one clean place. |
| 72 | |
| 73 | You move between terminal commands, browser work, HTTP requests, local tools, scanners, advisories, notes, screenshots, findings and reports. |
| 74 | |
| 75 | AI can help, but only if it lives inside that workflow. |
| 76 | |
| 77 | numasec gives the model a security workspace instead of just a chat box. It keeps the target, scope, tools, runbooks, findings, evidence, replay and report state together while the work is happening. |
| 78 | |
| 79 | The goal is simple: |
| 80 | |
| 81 | **make security work feel faster, sharper and less scattered.** |
| 82 | |
| 83 | numasec is strongest today for authorized AppSec and Pentest workflows. Other cyber surfaces exist or are possible, but they are not marketed as equally mature yet. |
| 84 | |
| 85 | ## Why now |
| 86 | |
| 87 | Coding agents changed how developers work. |
| 88 | |
| 89 | They read code, run commands, edit files, execute tests and stay inside the development loop. |
| 90 | |
| 91 | Security needs the same shift, but security work has different constraints. |
| 92 | |
| 93 | A security agent needs to know the target, stay inside scope, use the local toolchain, |
People who liked this also viewed
6 picksType
- mcp-scannerScan MCP servers for potential threats & security findings.MCP ServersJul 2026
- hol-guardOpen-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.MCP ServersJul 2026
- agent-scanSecurity scanner for AI agents, MCP servers and agent skills.MCP ServersJul 2026
- falcon-mcpConnect AI agents to CrowdStrike Falcon for automated security analysis and threat huntingMCP ServersJul 2026
- python🔐 Plug-and-play auth for Python MCP servers.MCP ServersAug 2025
- auth0-mcp-serverConnect LLMs and AI agents to Auth0 Management APIs via an MCP server. Use natural-language commands to create apps, deploy Actions, and query logs—runs locally and supports interactive tenant authentication for secure Auth0 administration from AI tools/CLIs.MCP ServersJul 2026
