Cybersecurity Agent

VulnHunter: An AI Security Agent for Web Application Vulnerability Detection VulnHunter is an OpenEnv-compatible reinforcement learning environment that trains AI agents to detect and patch web application security vulnerabilities. The green agent evaluates coding agents on their ability to: Identify vulnerabilities - Correctly classify SQL injection, Cross-Site Scripting (XSS), and Path Traversal vulnerabilities in Python/Flask web applications Generate secure patches - Produce syntactically correct code fixes that block exploits without breaking functionality Reason about security - Explain vulnerability mechanisms and justify fix approaches The agent is scored using a hierarchical reward structure: +0.3 for correct vulnerability identification, +0.2 for valid patches, +1.0 for patches that successfully block exploits, and -0.2 for syntax errors. Maximum score is 1.5 per vulnerability. Trained using GRPO (Group Relative Policy Optimization) with Unsloth on an NVIDIA A100 GPU, VulnHunter demonstrates that smaller, specialized models (7B parameters) can achieve expert-level security analysis through targeted reinforcement learning.

Agent Trust Arena is a security benchmark for evaluating AI agents' ability to establish trust, detect threats, and maintain secure collaboration in multi-agent enterprise workflows.

This project introduces a specialized evaluation framework for autonomous security agents using the CyberGym/OSS-Fuzz infrastructure. It focuses on the ability of agents to automate the discovery and verification of real-world vulnerabilities (Crashes, Memory Corruption) in C/C++ projects.

This green agent evaluates the behavior of an AI system by simulating benign but potentially sensitive usage patterns and telemetry events. It assesses how the target system detects, classifies, and responds to these scenarios, including risk scoring, policy enforcement, and response consistency. The agent focuses on end-to-end evaluation of safety handling, signal interpretation, and decision outcomes, ensuring the system operates within expected guardrails without manual intervention.

AI security agent that audits MCP skills and agent code for vulnerabilities. Detects prompt injection, tool poisoning, and credential leaks. Issues cryptographic trust certificates.

The Symbiotic green agent tests the participant agent's ability to classify security threats in openHAB smart home rule interactions. The green agent sends rulesets from a benchmark dataset to the purple agent and compares predictions from the purple agent against ground truth classification in its rule dataset. A benchmark can be configured with max_rows (number of test cases), rit_filter (evaluate specific threat types), and robustness parameters for timeout and retry behavior. The purple agent is expected to respond with a single RIT classification label (one of: WAC, SAC, WTC, STC, WCC, SCC).