Four Major Tech Companies Now Ship Competing Open-Source Agent-Security Tools — NVIDIA, Tencent, Uber, and Perplexity
GitHub·high signal
The `agent-security` GitHub topic now holds 42 repos above 100 stars, and four of them come from large tech companies rather than startups: NVIDIA/SkillSpector (14,498 stars, scanning Claude Code/Codex/MCP skills for prompt injection and supply-chain risk), Tencent/AI-Infra-Guard (4,467, red-teaming with Many-Shot/PAIR/GOAT/ActorAttack jailbreaks), uber/ADR (1,351 stars, 'deployed at Uber', sensor v1.0.0 on 2026-07-31), and perplexityai/numbat (886 stars, created 2026-07-24). Numbat is the newest entrant and the most EDR-shaped: a single cgo-free binary for macOS/Linux/Windows that normalizes agent hooks, plugins, and OTLP logs into one event model, evaluates it with a CEL rule engine, and detects cloud-metadata probing, secret-file access paired with exfiltration, and unauthorized SSH key persistence — all shipped rules monitor-only, blocking off by default.