Open Source

A practical comparison of how to produce an AI Bill of Materials in 2026 — CycloneDX ML-BOM vs SPDX 3.0 AI Profile, the best open-source/GitHub generators, the commercial AI-SPM platforms that offer AIBOM, and the free PlayCISO tools you can use today.

Open Dot is the open-source alternative to OpenAI Dots: always-on AI agents running locally on your Mac at ~1/10th the cost. How it works and the risks.

VirusTotal shipped VTAI, a free MCP server and REST API for checking files, URLs, domains and IPs — no paid key required. Here is how it actually compares to the abuse.ch feeds, urlscan.io, Google Safe Browsing and MetaDefender Cloud on coverage, quotas and auth friction.

Ars0n Framework v2 is an open-source bug bounty recon platform that wraps 50+ tools, ranks targets by ROI, and teaches you while you hunt. A 3-minute tour.

RedCell is an open-source AI agent that plans and runs a full penetration test with nmap, nuclei and Metasploit, then writes the report. How it works and its limits.

OpenVuln is Z.ai’s free tool that points its GLM-5.3 model at any GitHub repo to hunt vulnerabilities. How it works, the numbers, and what it means for OSS.

Arsenal-NG gives penetration testers instant fuzzy search across 2,800+ pentest commands in a terminal UI written in Go. Here's why it's worth adding to your toolkit — and what security leaders need to understand about the tools their red teams use.