AgentIndex icon
AgentIndex
cybersec-toolkit logo
cybersec-toolkit
★ 77
vs
norviq logo
norviq
★ 26

cybersec-toolkit vs norviq

cybersec-toolkit: This is a comprehensive cybersecurity toolkit with built-in AI integration, featuring an embedded MCP server that enables AI assistants to discover, recommend, and safely execute over 580 security tools. It combines a modular installer with an AI control plane, allowing for intelligent tool orchestration and policy-enforced execution across various security tasks.; norviq: Norviq is a policy enforcement point that intercepts and evaluates every LLM agent tool call against OPA/Rego policies on Kubernetes. It prevents potential risks like prompt injection or reasoning errors by ensuring tools only run if explicitly allowed by policy, enhancing AI safety and auditability.

01

TL;DR

cybersec-toolkit logo
cybersec-toolkitSecurity & Safety · ★ 77

Automate external reconnaissance and attack surface enumeration for bug bounties and pentests.

Read cybersec-toolkit full review →
norviq logo
norviqSecurity & Safety · ★ 26

Preventing LLM agents from executing unauthorized or dangerous tool calls, such as `execute_sql` or `send_email` without explicit policy approval.

Read norviq full review →
02

Side-by-Side Comparison

Field
cybersec-toolkit logocybersec-toolkit
norviq logonorviq
Category
Security & Safety
Security & Safety
Stars
★ 77
★ 26
License
MIT
Apache-2.0
Install Command
git clone https://github.com/26zl/cybersec-toolkit.git && cd cybersec-toolkit && sudo ./install.sh
kubectl create namespace norviq && kubectl create namespace default && helm install norviq oci://ghcr.io/norviq-dev/charts/norviq --version 0.2.5 -n norviq --set 'policyQuotaNamespaces={default}' --set config.dbSslMode=disable
Updated
1d ago
3w ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
Cybersecurity Toolkit, AI Integration, Ethical Hacking
LLM Agents, Policy Enforcement, Kubernetes
03

Features

cybersec-toolkit logocybersec-toolkit
01AI-driven tool execution with enforced safety policies.
02Comprehensive toolkit with 580+ tools, modular installer, and profiles.
03Interactive AI companion and opt-in autonomous solver loop.
04Strict security execution policies including argument sanitization and network policy.
norviq logonorviq
01Policy enforcement using OPA/Rego for sub-second, fail-closed evaluation of agent tool calls.
02Kubernetes-native deployment with custom resource definitions (CRDs), a mutating webhook, and Helm chart support.
03Supports workload identity using SPIFFE/SPIRE SVIDs for granular, per-agent-class and per-namespace policy scoping.
04Provides a Console UI for policy catalog/editor, attack/asset graphs, agent trust management, and audit stream.
05Includes a red-team suite with built-in adversarial tests to validate policy effectiveness against attacks like prompt injection or SQLi.
04

Use Cases

cybersec-toolkit logocybersec-toolkit
↳Automate external reconnaissance and attack surface enumeration for bug bounties and pentests.
↳Guide web exploitation tasks, such as confirming and exploiting SQL injection or GraphQL vulnerabilities.
↳Assist in Active Directory and internal network penetration testing, from credential gathering to lateral movement.
↳Perform digital forensics and incident response (DFIR) tasks like memory dump timeline analysis and C2 beaconing detection.
norviq logonorviq
↳Preventing LLM agents from executing unauthorized or dangerous tool calls, such as `execute_sql` or `send_email` without explicit policy approval.
↳Ensuring compliance by enforcing policy-driven gates on agent tool interactions and providing comprehensive audit logs for all decisions.
↳Implementing fine-grained security policies for different agent classes and namespaces within a Kubernetes environment.
↳Detecting and blocking prompt injection or reasoning errors that could lead to malicious tool execution or data exfiltration.
FAQ

FAQ

What is the difference between cybersec-toolkit and norviq?
Both cybersec-toolkit and norviq are in the Security & Safety category. cybersec-toolkit has 77 stars, while norviq has 26 stars.
Which is better, cybersec-toolkit or norviq?
The best choice depends on your use case. Choose cybersec-toolkit if Automate external reconnaissance and attack surface enumeration for bug bounties and pentests., and norviq if Preventing LLM agents from executing unauthorized or dangerous tool calls, such as `execute_sql` or `send_email` without explicit policy approval..
Is cybersec-toolkit free or open source?
Yes, cybersec-toolkit is open source on GitHub (MIT).
Is norviq free or open source?
Yes, norviq is open source on GitHub (Apache-2.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to cybersec-toolkit →Alternatives to norviq →cybersec-toolkit details →norviq details →