Every tool ships a CLI, JSON/SARIF output, an MCP server, polyglot ports (Py/JS/Go/Rust), a Dev Container, cross-OS + cloud deploy, and CI/CodeQL. Most ship real, tested implementations .
flowchart LR
U[You / CI / Agents] --> S[Cognis Neural Suite]
S --> SEC[Security]
S --> AI[AI / Agents]
S --> MIL[Military / IC]
S --> BIZ[Business / Data]
S -.MCP.-> AG[AI agents]
Loading
Sample result format (illustrative values — run on your own data for real findings):
{
"response": {
"model_id": "mnist-1234",
"input_data": [
{
"image": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAA... (truncated binary data) ...AAAAAElFTkSuQmCC",
"label": 5
},
{
"image": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAA... (truncated binary data) ...AAAAAElFTkSuQmCC",
"label": 8
}
],
"output_data": [
{
"prediction": 5,
"confidence": 0.9
},
{
"prediction": 8,
"confidence": 0.7
}
]
}
Pick any tool from the Catalog below and install it directly from its repo (every tool ships a CLI):
pipx install " git+https://github.com/cognis-digital/<tool>.git" < tool> --help
Run the suite demo or per-platform setup from this repo's scripts/:
./scripts/setup-linux.sh # setup-macos.sh / setup-windows.ps1
Most tools emit JSON/SARIF so findings compose across the suite — pipe one tool into another or into jq:
quantumready scan ./src --format json | jq ' .findings[]'
Drive any tool from an agent over MCP (each repo ships an MCP server), or via Docker:
docker run --rm ghcr.io/cognis-digital/< tool> :latest --help
In CI, install the tools you need and gate the build on their exit codes:
./scripts/ports-test.sh && ./scripts/bench.sh
Why this suite stands out Most tools make you choose: cloud-locked or abandoned OSS; one language; one IDE; a black box. The Cognis Neural Suite is the rare combination that's all of the below, across every tool :
🔒 Self-hosted & private — runs on your box, your data never leaves.
🧠 MCP-native — every tool is an agent capability; drive the whole suite from Claude/Cursor/agents.
🌐 Polyglot — the same logic in Python, JavaScript, Go, and Rust (ports/).
🧩 Unified — one license, one CLI grammar, one JSON/SARIF shape, so findings compose across tools.
✅ Real, tested code — not slideware; CLIs you can pip install and run today.
🚀 Ships everywhere — pip/pipx/uv/Docker/Homebrew/curl, Linux/macOS/Windows, devcontainer, k8s, AWS/Azure/GCP.
No other single org gives you this breadth (security → AI → military/IC → compliance → data → dev) with this much coherence.
⭐ Start here (5 that punch above their weight)
Try
One-liner
quantumready grade your code's post-quantum exposure (NIST FIPS 203/204/205)
agentpassport the unsolved 2026 problem: prove which human authorized which agent
uncensored-fleet one-command local multi-model LLM fleet + agent harness
cognis-code local uncensored coding wired into every IDE
mcpify turn ANY CLI into an MCP server in one line
Install any tool — many ways, every platform pip install " git+https://github.com/cognis-digital/<tool>.git" # pip (works today)" git+https://github.com/cognis-digital/<tool>.git" # isolated CLI" git+https://github.com/cognis-digital/<tool>.git" < tool> :latest --help # Docker< tool> /main/install.sh | sh Every repo also ships Linux/macOS/Windows setup scripts, a Dev Container, JS/Go/Rust ports, and cloud deploy (Docker/k8s/Terraform/AWS/Azure/GCP). See each repo's docs/INSTALL.md.
🛡️ AI Security & Agents — 36 repos
Tool
Description
adversa LLM red-team harness — OWASP LLM Top 10 + MITRE ATLAS attack packs
aegis AI Agent Permission & Access Auditor — surfaces the lethal trifecta of credentials + injection + reach
agentlog Agentic workflow replay & audit with OTel GenAI semantic conventions
agentpassport Verifiable AI-agent identity + multi-hop delegation chains anchored to a human principal (the unsolved 2026 agent-auth gap)
agentsmith Config-first scaffolding and orchestration for multi-agent workflows
aicard Auto-generated NIST AI RMF / EU AI Act Annex IV model & system cards
biascope Embedded bias probe suite — demographic / occupational / geographic
cloud-setups Firebase, GCP, and Azure project setups — bootstrap, deploy, IaC, and emulators, merged and rebranded
cognis-devbox Custom dev OS image (Packer/KVM/Vagrant/cloud-init) with every language + cloud + AI tool preinstalled
cognis-operations How an agentic company runs — Cognis Digital's 4-layer operating model, org chart, agent registry, and governance
cognis-sources Curated index of 10k+ public technical & research links (privacy-filtered)
compliance-atlas Condensed, cross-walked reference for SOC2, ISO 27001, NIST CSF/800-53/800-171, CMMC, GDPR, CCPA, HIPAA, PCI DSS, EU AI Act
evalbench Offline LLM / agent eval harness with regression gates
guardpost Runtime agent firewall — PII redaction, rate limits, policy enforcement
hallumark LLM hallucination & grounding auditor for RAG systems
engram Model-agnostic, portable long-term memory framework for AI agents (MCP-native)
ledgermind Local LLM cost & token forensics proxy with anomaly detection
locateanything Infer where a photo was taken using a local uncensored vision + reasoning model (OSINT/geoint, 100% local)
mcpharden MCP server hardening linter — capability declarations, transport, tool descriptions
mcpify Turn any command-line tool into an MCP server — one line, zero boilerplate
memorybank Portable long-term memory store for agents, exposed over MCP
modelroute Local model router / proxy across Ollama, vLLM, and cloud with fallback
omni-install One menu to install every language, cloud CLI, container, and AI tool — Linux/macOS/Windows
privacyspoof AdGuard/uBlock blocklists + UA/geo/cookie/session spoofing with a browser compatibility matrix
promptmirror Prompt-injection & indirect-injection scanner for any LLM context input
promptpack Versioned prompt / template registry with A/B and rollbacks
ragkit Batteries-included local RAG pipeline — ingest, index, serve
ragshield RAG corpus poisoning detector — embedding anomalies, backdoor triggers
repo-roast An AI roasts (and then constructively fixes) your repo — local, free, savage
setup-scripts Curated, idempotent Ubuntu/Debian setup scripts for popular dev & infra tools
skillhub Local skill registry and installer for AI agents
skills Agent skill registry — portable skills for AI agents (MCP/Claude/ClawHub style)
templates Starter templates: Python CLI, MCP server, Dockerfile, CI, devcontainer, and more
toolguard Runtime allowlist and policy for agent tool-calls
uncensored-fleet Deploy a local multi-model LLM fleet (llama.cpp) with an agent harness, engram memory, and a one-command CLI
windows-toolkit Windows power-user starter kit — curated tools, 80+ shortcuts, one-command winget setup
🪖 Military & IC — 27 repos
Tool
Description
adsbwatch Analyze an ADS-B feed/CSV for anomalies: callsign spoofing, squawk 7500/7600/7700, and unusual loiter patterns.
airgap-pkg Self-contained installer for airgapped (SIPR/JWICS-style) environments
basemap Build and query a structured catalog of installations/AOIs with distance, sector, and coverage queries.
classguard Validate classification banner markings (CUI/CONFIDENTIAL/SECRET) in documents per portion-marking rules.
classmark CAPCO-shape classification banner + portion marking library — placeholders only
comint-osquery DISA STIG-aligned osquery configs + RMF mapper
convoy-or Military convoy routing w/ escort, dwell, threat-cost overlays
convoyplan Defense logistics route/sustainment planner computing fuel, resupply windows, and chokepoint risk from a YAML plan.
ewcorr Correlate electronic-warfare event logs by time/frequency/bearing to cluster emitters.
geoaoi Area-of-interest geospatial helper: bounding boxes, geofence checks, and change-event diffs from coordinate logs.
geoaoi-pro MIL-STD-2525 / APP-6 symbology + AOI helpers (QGIS-compatible)
honeypot-mil Honeypot event enrichment + STIX/TAXII + CISA IOC export
itarcheck Flags potential ITAR/EAR export-controlled terms and USML categories in code, datasheets, and docs.
milstdlint Lint documents against MIL-STD / DoD formatting and classification-marking rules.
natosymbol Generate and validate APP-6/MIL-STD-2525 symbol identification codes (SIDC).
opsecscan Scan documents and file metadata for OPSEC leaks: geotags, author, GPS EXIF, unit identifiers.
readiness Compute unit readiness (C-ratings style) from a personnel/equipment/training YAML and flag gaps.
readiness-rms Unit-readiness C-rating dashboard (C1-C4) — personnel, equipment, training
redforge-c2 Authorized red-team engagement governance: scope enforcement, TPI, audit-log overlay
rfsurvey Analyze RF spectrum-occupancy CSV/metadata for band usage, interference, and anomalies.
rmf-package Auto-generate SSP / POAM / SAR (eMASS / Xacta import format)
scifops SCIF/SAPF compliance helpers: badge audit, TPI, escort tracker
sigmeta Parse and classify signal metadata (freq, modulation, bandwidth) into a normalized catalog.
sigsurvey-rf RF spectrum survey, NTIA/FCC-aware band-plan validator
stigsentry DISA STIG checker + NIST 800-53 RMF mapper + POAM emitter
threatmodeler Generate STRIDE threat models and attack trees from a YAML system spec.
uaslog Counter-UAS telemetry/log analyzer that flags drone-detection events, RF bands, and track anomalies.
⚔️ Red Team & Offensive — 5 repos
Tool
Description
c2detect C2 server fingerprinter — Cobalt Strike, Sliver, Mythic, Havoc, Brute Ratel
crackq Self-hosted password cracking queue — multi-user hashcat with audit log
payloadlab Static malicious payload analyzer — PE/ELF/LNK/macro/OneNote
pwnreview Pentest report generator — YAML findings to CREST-grade PDF
redpath Active Directory attack path mapper — minimum-cost paths + remediation priority
🔵 Blue Team & Detection — 6 repos
Tool
Description
canarynet Self-hosted canary token network — AWS keys, DNS, docs, web URLs
edrgap EDR coverage & bypass detector — reconciles MDM + EDR + AD inventories
honeytrace Active-decoy network lure system — SSH, RDP, SMB, web honeypots
phishforge Open-source phishing simulation — campaigns, templates, training
sbomgate Continuous SBOM diff & vulnerability watch with maintainer-change tracking
sentrylog Single-file SIEM for small teams — Sigma rules + multi-source ingest
🎯 Tactical Security — 30 repos
Tool
Description
attackmap Map findings to MITRE ATT&CK techniques + coverage heatmap
authmatrix Test an access-control matrix (role x endpoint) for IDOR/authz gaps
cloudkeys Find leaked cloud keys (AWS/GCP/Azure) + classify blast radius
corsaudit Detect permissive/misconfigured CORS from headers or a config
cspbuilder Generate and audit a Content-Security-Policy from a page's resources
dirsight Analyze web content-discovery output (ffuf/gobuster) into ranked endpoints
dnsrecon Aggregate DNS recon (records, zone hints, takeover candidates)
emailrecon Aggregate email OSINT (breach hints, MX, SPF/DMARC posture)
exfilwatch Detect DNS/HTTP exfiltration patterns (entropy, beaconing) in logs
hashid Identify hash types and estimate crack cost/feasibility
headerscan Grade HTTP security headers (CSP/HSTS/XFO) A-F from a response dump
honeyurl Generate canary URLs/tokens + a matcher for trip events
iocextract Extract & defang IOCs (IPs/domains/hashes/URLs) from any text
jwtinspect Decode JWTs and lint for alg=none, weak secrets, and missing claims
logsift Detect brute-force, spray, and anomalous auth events in logs
metascrub Strip identifying metadata from docs/images before release
nmapdiff Diff two scans to surface new hosts/ports/services
pcapsummary Summarize flows/talkers/protocols from a pcap text export
phishcheck Score URLs/emails for phishing signals (lookalike, auth, intent)
portfan Summarize and diff nmap XML into prioritized, attackable findings
ratecheck Probe API rate-limit/abuse resistance from a request spec
reposecure One-shot repo security posture grade (secrets/CI/branch rules/deps)
s3sniff Flag risky cloud-bucket ACLs/policies from a listing or policy JSON
sigmacheck Lint and unit-test Sigma detection rules against sample events
ssltriage Grade TLS config (protocols/ciphers/expiry) from openssl/sslyze output
ssrfind Find SSRF-prone sinks and unvalidated URL fetches in code
subhunt Aggregate & dedupe subdomain enumeration from multiple sources
tokenrotate Plan + track secret rotation across providers from an inventory
webrecon Fingerprint web tech/CMS/frameworks from headers + body
yararun Run simple YARA-style string/regex rules over a directory
🧪 SecOps & DFIR — 29 repos
Tool
Description
apiseclint Lint OpenAPI specs for security gaps (authz, rate-limit, data exposure)
asnmap Map ASN/CIDR ownership & neighbors from whois/RIR exports
browserforensics Analyze exported browser history/downloads for IOCs and exfil signs
certsearch Analyze Certificate-Transparency exports for subdomains & rogue issuance
cipherdetect Detect & crack classical ciphers (caesar/vigenere/xor) by scoring
cookieaudit Audit Set-Cookie flags (Secure/HttpOnly/SameSite) from a response dump
cspm Cloud security posture from a config export (public buckets, open SGs, weak IAM)
cyberbench Chainable encode/decode/transform pipeline (base64/hex/rot/xor/url/gzip)
dmarcaudit SecOps tool — Cognis Neural Suite
dockeraudit Audit Dockerfiles + image configs for security smells
entropyscan SecOps tool — Cognis Neural Suite
evtxsift Find brute-force, persistence & lateral-movement signals in exported Windows event logs
filecarve SecOps tool — Cognis Neural Suite
ghaudit Audit a GitHub org's security posture (branch rules, 2FA, secrets) from an export
githubrecon Map a GitHub user/org footprint & leaked-secret surface from API exports
graphqlmap Analyze GraphQL introspection for risky fields, depth, and authz gaps
iamlint Lint cloud IAM policies (AWS/GCP/Azure JSON) for least-privilege violations
iocrep Score IOCs against offline reputation/allow lists with explainable verdicts
k8saudit Audit Kubernetes manifests against CIS-style security rules
memtriage Triage memory-dump artifacts: strings, IOCs, suspicious processes from a dump export
mftparse Analyze an NTFS $MFT CSV for timestomping and suspicious file activity
prefetchparse Surface program-execution evidence from Windows Prefetch exports
regexlab Test, explain & benchmark regexes + a library of security patterns
stixgen Build STIX 2.1 bundles from a list of IOCs/observables
tfscan Scan Terraform plans/configs for misconfigurations
timeliner Build a forensic super-timeline by merging & normalizing log/artifact CSVs
ttphunt Hunt MITRE ATT&CK techniques across logs with a rule pack
waybackrecon Mine archived URLs/params/endpoints from a Wayback/CDX export
yaragen Generate candidate YARA rules from sample files/strings
🏦 Fintech & Compliance — 25 repos
Tool
Description
accessreview Periodic user-access-review (UAR) campaign runner
auditrail Tamper-evident audit-log aggregator with hash-chained attestation
chargeguard Monitors dispute/chargeback feeds, flags fraud-rate threshold breaches (VAMP/Visa), and drafts representment evidence packets.
checkpoint-ai NIST AI RMF / EU AI Act / ISO 42001 self-assessment & SSP generator
clearancepath Personnel clearance hygiene tracker — SF-86, SEAD-3/4, training currency
cmmcmap CMMC Level 2 practice mapper — stack-aware SSP skeleton generator
dpiaforge DPIA and EU AI Act impact-assessment generator
fedramplens FedRAMP boundary visualizer & OSCAL-format SSP/POAM generator
frameworkmap Crosswalk controls across NIST, ISO 27001, SOC 2, CMMC, PCI
fraudlens Replays a stream of transactions against pluggable fraud rules and ML scorers, emitting precision/recall and alert volume from the terminal.
gdprkit GDPR/CCPA DSAR, RoPA, and cookie-consent toolkit
gsafinder GSA Schedule opportunity surveyor — SAM.gov + eBuy + FedConnect
iso20022 Validates, lints, and diffs ISO 20022 / pacs / camt payment messages and translates legacy MT into MX with schema-aware errors.
ledgerproof Verifies double-entry ledger integrity and tamper-evidence by checking balance invariants and hash-chained journal entries.
obscan Conformance and security linter for Open Banking / FAPI APIs: validates OAuth flows, consent scopes, and PSD2 endpoints against the spec.
panhound Scans code, logs, fixtures, and S3 buckets for leaked PANs (Luhn-validated card numbers) and CVVs before they hit prod.
policyforge Auto-generate security policies from a short questionnaire
quantumready Post-quantum migration readiness scanner — find quantum-vulnerable crypto and map to NIST PQC (FIPS 203/204/205)
sanctscan Screens counterparties and transactions against OFAC/EU/UN sanctions lists with fuzzy name matching and explainable hit scoring.
sbirscout SBIR/STTR topic discovery — DSIP + SBIR.gov + NIH digest with bid scoring
soc2box SOC 2 evidence collector and control tracker, self-hosted
tokenvault Self-hostable PCI tokenization microservice and CLI that swaps PANs for format-preserving tokens and proves no raw card data persists.
txgraph Builds a transaction graph from ledger/account data and surfaces structuring, layering, and mule-network patterns for AML triage.
vendorvet Third-party / vendor risk questionnaires with SBOM cross-ref
webhookvty Verifies and replays signed payment webhooks (Stripe/Adyen/PayPal/Plaid) locally, catching signature, idempotency, and replay-attack bugs.
🏥 Healthcare — 10 repos
Tool
Description
baadiff Scan a repo or infra manifest for HIPAA Security Rule gaps and produce a Business Associate readiness scorecard.
codemap Translate and validate medical codes across ICD-10, SNOMED CT, LOINC, RxNorm, and CPT from the CLI.
consentledger Maintain a tamper-evident, hash-chained audit log of patient-data access and consent events.
deidproof Re-identification risk assessment that computes k-anonymity, l-diversity, and HIPAA Safe Harbor compliance on a dataset.
dicomsweep De-identify DICOM imaging studies per the DICOM PS3.15 Annex E profile, scrubbing tags and burned-in pixel text.
fhirlint Validate FHIR R4/R5 resources and bundles against profiles (US Core, etc.) with precise, line-level error reporting.
hl7tap Parse, pretty-print, diff, and replay HL7 v2 messages over MLLP from the terminal.
phiscrub Stream-scan logs, CSVs, and free-text notes for PHI (names, MRNs, SSNs, dates, addresses) and redact or tokenize in place.
synthcohort Generate statistically realistic synthetic patient cohorts (FHIR/CSV) from a schema spec for dev and testing.
trialwatch Query, diff, and monitor ClinicalTrials.gov records, alerting on status, enrollment, or result changes.
⛓️ Web3 & Blockchain — 10 repos
Tool
Description
approvewarden Scans any wallet for dangerous ERC-20/721/1155 token approvals and infinite allowances, scoring drainer exposure and emitting revoke transactions.
bytematch Verifies that deployed on-chain bytecode matches a given source/Foundry build, detecting unverified or tampered proxies and implementations.
forkfuzz Mainnet-fork invariant fuzzer that replays your contract against live state and stateful sequences to break protocol invariants before deploy.
gasprofiler Per-opcode and per-function gas profiler that flags unbounded loops, DoS-prone patterns, and regressions against a committed baseline.
mevscope Replays a tx or address history to attribute sandwich, frontrun, and backrun MEV extraction with per-trade loss accounting.
oraclewatch Monitors price-oracle feeds for staleness, deviation, and manipulation exposure, simulating TWAP/spot attack profitability per pool.
reentryx Static + symbolic detector that flags reentrancy, cross-function, and read-only reentrancy paths in Solidity/Vyper with CI-gating SARIF output.
rugradar Token contract risk scanner detecting honeypots, hidden mint/blacklist functions, owner backdoors, and unlocked liquidity before you ape.
sigsleuth Decodes raw calldata and EIP-712 typed-data into human-readable intent, flagging blind-signing and malicious permit/Permit2 payloads.
storagelens Diffs and decodes contract storage layouts across proxy upgrades to catch storage-collision and uninitialized-slot bugs.
📡 IoT / OT / Embedded — 10 repos
Tool
Description
blescope Sniff and decode BLE GATT traffic, fingerprint device profiles, and assert on insecure pairing/characteristics in CI against a capture.
canzap Replay, fuzz, and assert on CAN bus traffic from a .pcap or SocketCAN interface with a tiny YAML DSL.
fwxray Diff two firmware images and surface exactly what changed: new binaries, flipped config flags, added certs, and shifted entropy regions.
keyhunt Scan firmware blobs and filesystem dumps for hardcoded private keys, API tokens, default creds, and weak RSA/ECC material.
modpot Spin up a high-interaction Modbus/DNP3 ICS honeypot that logs attacker register reads/writes as structured JSON.
mqttspy Passively map an MQTT broker: enumerate topics, detect unauthenticated writes, spot PII/secrets in payloads, and emit a risk report.
otaverify Validate OTA update packages end-to-end: signature chains, rollback protection, anti-downgrade counters, and delta-patch integrity.
rtosmap Statically map task structures, stack usage, and ISR call graphs in FreeRTOS/Zephyr firmware to flag stack overflows and priority-inversion risks.
sbomb Generate a CycloneDX SBOM directly from an unpacked firmware root filesystem and flag components with known CVEs and EOL kernels.
uefiscan Audit UEFI firmware dumps for missing Secure Boot keys, unsigned modules, S3 boot-script vulns, and known SMM threats.
📱 AppSec & Mobile — 10 repos
Tool
Description
apkpeek One-command static triage of Android APK/AAB binaries: surfaces hardcoded secrets, exported components, dangerous permissions, and insecure manifest flags as a single SARIF report.
binhunt Game/desktop binary integrity scanner that fingerprints executables, detects common packers/obfuscators, and diffs against a known-good baseline to catch tampering.
cheatsense Anti-cheat telemetry analyzer that ingests game session logs and flags statistically anomalous input/aim/movement signatures with explainable per-flag scoring.
dastlite A headless, config-as-code DAST runner that crawls an authenticated web/mobile-API surface and fires a curated active-scan ruleset, emitting deduplicated SARIF.
deeplinkfuzz Fuzzes Android/iOS deep links, intents, and custom URL schemes against an emulator/device to surface unvalidated-redirect, injection, and component-hijack bugs.
hookcraft Generates ready-to-run Frida instrumentation scripts from a YAML intent (e.g. 'bypass SSL pinning', 'dump crypto keys') and verifies they attach to a target process.
ipasnitch Static scanner for iOS .ipa bundles that flags ATS exceptions, missing entitlements hardening, embedded URLs/secrets, and weak Info.plist transport settings.
pincheck Validates that a mobile app's TLS pinning, certificate transparency, and network-security-config are actually enforced by replaying a MITM handshake against the built artifact.
sbomx Generates a CycloneDX SBOM for mobile apps by unpacking native libs and bundled SDKs, then matches components against known-vuln and tracker/privacy databases.
semsift Lightweight semantic-aware SAST that runs curated taint rules over diffs only, so PRs get fast incremental SAST instead of whole-repo scan fatigue.
🔍 OSINT & Intelligence — 6 repos
Tool
Description
corpmap Corporate structure & beneficial-ownership mapper
cryptotrace Free-tier blockchain investigator — ETH/BTC clustering + sanctions xref
darkmirror Surface-web mirror of public Tor leak-site index for brand monitoring
geolens Image geolocation toolkit — EXIF, sun-shadow, OCR, reverse-search
maritimeint AIS vessel tracking & sanctions-evasion anomaly detection
personagraph Identity resolution dossier — username/email/phone cross-platform
🗄️ Data & Datasets — 8 repos
Tool
Description
csvlens Fast CLI for profiling and cleaning huge CSV / Parquet files
datasetcard Auto Dataset Cards / datasheets with Croissant + provenance
duckprobe Zero-setup data-quality checks on any file or warehouse via DuckDB
embedaudit Embedding / vector-store drift and poisoning audit
lineagemap Column-level lineage extracted from SQL and dbt
piiscan PII discovery across warehouses and lakes (data-side scanner)
schemadrift Schema-change detector and data-contract tests
seedforge Synthetic test-data generator with referential integrity
🧰 Developer & Supply Chain — 20 repos
Tool
Description
alertmux Alert dedup, correlation, and routing in front of Grafana / PagerDuty
apidiff Breaking-change detector for OpenAPI / GraphQL across commits
cloudbill Multi-cloud cost report, anomaly detection, and FOCUS export
codeglance Repo onboarding map — architecture + hotspots for humans and agents
depgraph Dependency risk visualizer — Scorecard + OSV + typosquat + maintainer signals
envdoctor .env validator, secret-presence and config-drift checker
flakefinder Flaky-test detector from CI history with quarantine suggestions
gitstory Changelog and release notes from conventional commits
k8scost Kubernetes cost and rightsizing advisor with no Prometheus dependency
licenselens Dependency license + SBOM gate, developer-CLI first
mcpforge Scaffold, test, and publish MCP servers in minutes
ossaudit OSS license compliance auditor — AGPL contamination + NOTICE generation
otelbox One-command OpenTelemetry collector + dashboards bundle
pipewatch-pro CI/CD supply-chain auditor — GH Actions / GitLab CI / OWASP CI/CD Top 10
probesite Synthetic uptime and Playwright checks exported to Prometheus
promptlint Lint, version, and test prompts as code with a CI gate
secretsweep Repo secret scanner + auto-rotator across providers
shipcheck Dockerfile linter with image-size and CVE advisories
statuskit Self-hosted status page with incident timeline and subscribers
tokenmeter Token and cost counter / budgeter for LLM apps, CI-ready
💼 Business & Ops — 10 repos
Tool
Description
boardroom Investor-update and KPI one-pager generator from your metrics
churnlens Self-hosted SaaS metrics — MRR, churn, LTV from Stripe or CSV
invoctl CLI invoicing + payment-link generator with PDF and a local ledger
leadforge Lightweight MCP-native CRM pipeline with email sequences
meetingcost Compute the dollar cost of meetings from your calendar (.ics)
orgchart Org charts and headcount plans generated from CSV / HRIS export
paywatch Recurring-charge and subscription detector from bank/Plaid CSV
quotecraft Proposal / quote / SOW generator — YAML to branded PDF
runbookgen Incident runbook and SOP generator from templates
seataudit SaaS license, seat-usage and shadow-IT auditor
📰 Info Integrity & Privacy — 11 repos
Tool
Description
breachwatch Personal breach aggregator — HIBP + DeHashed + stealer-log triage
claimtrace Misinformation provenance tracer — earliest-known appearance graph
deepcheck Lightweight synthetic-media detector with C2PA validation
electionlens Influence-operations pattern monitor for election periods
narrativediff News bias & framing diff across 50+ outlets per event
optout Automated data-broker opt-out engine — top 50 brokers, CCPA/GDPR letters
piicomb Local PII discovery in your own files — SSN/CC/passport/DL/email/phone/DOB
privacyshell Hardened browser profile generator — Firefox / LibreWolf / Brave
recall Privacy-first local RAG over personal data — encrypted, audit-logged
trackblock Family phone stalkerware audit — MVT-class iOS/Android forensics
vaultmap Personal asset & account inventory — estate-planning-grade encrypted
🤖 AI Infra & Resources — 1 repos
Tool
Description
cognis-code Local uncensored AI coding suite — one endpoint wired into VS Code, JetBrains, Cursor, Zed, Neovim, opencode, and Aider
🎮 Labs & Games — 3 reposMore — 14 repos
Repo
Description
certpatrol TLS cert lifecycle & rogue-issuance watch via Certificate Transparency
coldforge Render personalized cold-outreach sequences from Markdown templates + a contacts CSV, with spam-score linting and per-send dry-run preview.
crmsync Bidirectional, idempotent sync of contacts/deals between a local SQLite source-of-truth and CRM APIs (HubSpot/Pipedrive/Salesforce) via one config.
dealflow Model your sales pipeline as a YAML state machine and compute conversion rates, stage velocity, and weighted forecast straight from CRM exports.
dnsaudit DNS posture & misconfiguration scanner — SPF/DKIM/DMARC/DNSSEC/CAA
dripcheck Lint email sequences and drip campaigns for deliverability: SPF/DKIM/DMARC, link health, unsubscribe presence, and CAN-SPAM/GDPR compliance.
egresswatch Server-side outbound connection auditor — eBPF/Falco wrapper
enrichr Enrich a leads CSV with firmographics, tech stack, and contact validation from pluggable providers, caching results to avoid duplicate API spend.
introbot Find warm-intro paths through your team's combined network graph and draft double-opt-in intro requests from a single contacts manifest.
magicid Identify true file types by magic bytes (beats extensions)
pactgen Generate branded sales proposals and SOWs from a YAML scope file + pricing table into PDF/HTML, with a deterministic line-item math check.
partnermap Track partnership/channel agreements as YAML records and compute account overlap, co-sell coverage gaps, and renewal/expiry alerts.
raisedeck Build and maintain an investor-update + data-room manifest from a metrics YAML, rendering monthly MRR/burn/runway updates with consistent KPIs.
warmline Score and rank inbound/outbound leads from a YAML rulebook, emitting a ranked queue as JSON/CSV for your SDRs and CI gates.
It genuinely helps others find them. Contributions welcome under the collaboration-pull model — see any repo's CONTRIBUTING.md.
cognis-neural-suite composes with the 300+ tool Cognis suite — JSON in/out and a shared
OpenAI-compatible /v1 backbone. See INTEROP.md
Forward cognis-neural-suite's findings to STIX/MISP/Sigma/Splunk/Elastic/Slack/webhooks via
cognis-connectINTEGRATIONS.md
Source-available under the Cognis Open Collaboration License (COCL) v1.0 (some military repos retain their upstream GPL). See each repo's LICENSE.
Cognis Digital — Making Tomorrow Better Today.
