Control Pack Alternatives

ISL Online is remote desktop and remote support software for IT teams, help desks, managed service providers (MSPs), and enterprises that need secure attended remote support and unattended remote access across distributed environments. It enables technicians to securely access, view, control, troubleshoot, and manage Windows, macOS, Linux, iOS, and Android devices from any location, with or without an end user present. IT teams use ISL Online for remote troubleshooting, help desk support, remote IT management, device access, file transfer, multi-monitor navigation, chat and audio/video communication, session recording and handoff, remote command execution, and persistent unattended access through ISL AlwaysOn. The unattended access agent supports mass deployment and device grouping. ISL Online also supports RDP and SSH tunneling without requiring VPN access or firewall changes, simplifying connectivity across multiple networks and locations. ISL Online offers flexible deployment options for different security, infrastructure, and data residency requirements. Organizations can use cloud remote access (SaaS), self-hosted remote desktop software for on-premises and air-gapped environments, or Managed Private Cloud for dedicated single-tenant deployment and greater data control. Premium Cloud, Self-Hosted, and Managed Private Cloud support unlimited licensed users and managed devices. Mobile apps are included at no additional cost with both Cloud and Server licenses. Security features include AES 256-bit end-to-end encryption with RSA 2048/4096-bit key exchange, two-factor authentication (2FA), single sign-on (SSO), session recording, detailed audit logs, role-based access controls, IP and MAC address restrictions, and blackout mode for sensitive environments. ISL Online is ISO/IEC 27001:2022 certified and supports GDPR compliance requirements. The platform integrates with ITSM, RMM, PSA, and endpoint management tools including ServiceNow, Freshdesk, Freshservice, Microsoft Intune, Barracuda RMM, Heimdal, Autotask PSA, HaloITSM, SuperOps, PDQ Connect, and Bitrix24. A full API is available for custom workflows and integrations. ISL Online provides scalable remote support, secure remote access, centralized remote management, cross-platform remote control, and flexible deployment without complex network configuration. A free trial is available without a credit card, and the software supports 20 languages.

Invicti Web + API, formerly Acunetix, is a dynamic application security testing (DAST) platform for identifying and validating vulnerabilities across web applications, APIs, and other runtime assets. The platform automatically discovers applications, APIs, shadow assets, unlinked pages, and undocumented endpoints while supporting modern JavaScript applications and authenticated workflows. Its scanning engine detects more than 7,000 types of security issues, including vulnerabilities covered by the OWASP Top 10 and OWASP API Top 10 as well as business logic flaws. Invicti combines AI-driven risk scoring with runtime reachability, exploitability, and business context to help security teams prioritize vulnerabilities that represent demonstrable risk.

Muse Code is Meta’s terminal coding agent, powered by Muse Spark 1.2, for handling complex software engineering tasks across large repositories. The agent can plan changes, write code, validate results, and coordinate multiple persistent subagents during development sessions. Muse Code uses async background agents that stay active throughout a session to reduce repeated information gathering and help complete multi-step tasks with less steering. Its runtime uses a local event log that records model calls, tool runs, approvals, and edits so sessions can be replayed and resumed after failures. Muse Code includes bundled skills such as /plan for approval-gated planning, /grill for stress-testing plans, and /goal for working toward completion. Built for AI developers and software teams, Muse Code helps automate coding workflows, long-running engineering tasks, debugging, and repository-level development.

Kernel Pack is a commercial Windows command-and-control platform with an integrated kernel agent for authorized red-team and penetration-testing operations. Its DOG engine discovers and validates kernel data-only gadgets at runtime, while more than 100 exploit backends provide kernel access and SYSTEM privileges. Capabilities include kernel memory access, token and PPL manipulation, process operations, ETW control, callback management, SSDT and Shadow SSDT hijacking, IDT/GDT execution, driver dispatch manipulation, and VTL0/VTL1 workflows. It is designed for red teams and penetration testers performing controlled, non-production Windows kernel assessments.

Adversary Simulations and Red Team Operations are security assessments that replicate the tactics and techniques of an advanced adversary in a network. While penetration tests focus on unpatched vulnerabilities and misconfigurations, these assessments benefit security operations and incident response. Cobalt Strike gives you a post-exploitation agent and covert channels to emulate a quiet long-term embedded actor in your customer’s network. Malleable C2 lets you change your network indicators to look like different malware each time. These tools complement Cobalt Strike’s solid social engineering process, its robust collaboration capability, and unique reports designed to aid blue team training.

SSHive is a Mac app that brings SSH, SFTP, FTP/FTPS, RDP, VNC, Telnet and serial console sessions together in one window, designed as a MobaXterm alternative for macOS. Saved servers live in a sidebar with folders, favorites and recent connections. The SSH terminal has tabs, split panes, snippets and broadcast to several servers, with a CPU, RAM and uptime bar for Linux and macOS servers. An SFTP browser opens next to the terminal, alongside a dual-pane file manager with drag and drop, resumable uploads and a remote editor. It handles local, remote and SOCKS5 tunnels, jump hosts, and SSH agents such as 1Password, Strongbox, Secretive or Bitwarden. Windows Remote Desktop and VNC sessions open in tabs. Network tools, an OTP authenticator and an optional MCP server for AI assistants are built in. No account and no telemetry; passwords are encrypted with the macOS Keychain. Free on the Mac App Store with a one-time Pro purchase, and also available on iPhone and iPad.

You can't secure what you don't know about. Achieve real-time visibility with continuous mapping of your entire external perimeter — including all domains, subdomains, networks, third-party infrastructure, and more. Identify vulnerabilities targeted in real-world scenarios, including those involved in complex attack chains, with an automated engine that eliminates the noise and illuminates true exposures. Leverage expert-driven continuous penetration testing and the latest offensive security tools to validate exposures and uncover post-exploitation pathways, systems, and data at risk. Then operationalize those findings to close attack windows. Cosmos captures your entire external attack surface, discovering not only known targets but also those that are often out-of-scope for traditional technologies.

AgentRidge is desktop security-audit software for assessing e-commerce websites, customer portals and other web platforms within an authorized testing scope. Its AI agents explore defined pages, account roles, checkout flows, business rules, exposed services and data, coordinating security tools as part of an investigation. The software presents findings with evidence, reproduction steps, severity and business impact, and generates PDF reports for developers and security teams. Users can run independent assessments on macOS, Windows or Linux through the command-line edition; audit data and results are stored locally, while account, licensing and payment functions use online services. AgentRidge is intended for e-commerce operators, web-platform teams, agencies, developers, security engineers, penetration testers and red teams. Buyers may choose an annual software license for self-directed audits or a separately scoped, vendor-delivered audit and remediation service.

Herdr is a terminal-based runtime and multiplexer for developers who run AI coding agents, shells, tests, and other command-line tools. It organizes work into workspaces, tabs, and panes managed by a background server, so processes can keep running when a client disconnects. Users can reattach locally or connect to Herdr on other machines over SSH. The software detects supported coding agents and displays whether they are working, blocked, idle, or done; integrations can preserve native agent sessions after a server restart. Its CLI and local socket API let scripts and agents inspect sessions, manage panes, start or prompt agents, and wait for state changes. Developers can configure keybindings and themes and extend workflows with local executable plugins. Herdr is installed on macOS, Linux, or Windows and is released under the Apache 2.0 license.

Horizon3.ai® can assess the attack surface of your hybrid cloud, helping you continuously find and fix your internal and external attack vectors before criminals exploit them. NodeZero is an unauthenticated, run-once container you deploy yourself. No persistent agents and no provisioned credentials, up and running in minutes. With NodeZero, you own your pen test from start to finish. You configure the scope and attack parameters. NodeZero conducts benign exploitation, gathers proof, and delivers a complete report, so you can focus on real risk and maximize your remediation efforts. Run NodeZero continuously and evaluate your security posture over time. Proactively identify and remediate attack vectors as they appear. NodeZero discovers and fingerprints your internal and external attack surface, identifying the ways exploitable vulnerabilities, misconfigurations, harvested credentials, and dangerous product defaults.

OpenChiip Harness is a self-hosted AI agent runtime and orchestration framework for developers building local or coordinated agent workflows. It combines LLM conversations, skill orchestration, tool execution, multi-layer memory, resource monitoring, and multi-agent collaboration in a React administration dashboard. Run it as a local service or connect it to the OpenChiip platform for collaborative scheduling. Its CLI, web dashboard, HTTP API, and WebSocket interface support chat, tools, sessions, memory, task management, and monitoring. It supports Baidu ERNIE, OpenAI-compatible model providers, and delegation to Codex or Claude Code. Install via pip or deploy with Docker, Linux packages, systemd, or Windows installers; macOS supports pip installation. Licensed under AIGCGPL-1.0.

Atomic Agent is an open-source, local-first AI agent that runs on your own machine from the terminal. It drives your real tools — shell, files, and browser — and keeps every session on your own disk. Point it at a local model through llama.cpp, or connect a hosted model when you want more power. You choose the model, you own the data, you stay in control. No cloud lock-in. Install with a single command on macOS, Linux, or Windows. Built for developers and power users who want a capable autonomous agent without shipping their work to someone else's cloud.

MindFort is an AI-powered security platform built around autonomous agents that continuously test web applications for vulnerabilities and fix them in real time, transforming traditional penetration testing into an always-on, self-operating process. Instead of relying on periodic audits or manual scans, it deploys a fleet of AI agents that probe applications, APIs, and infrastructure the way real attackers would, mapping the entire attack surface and identifying exploitable weaknesses with high accuracy. Users can configure a target and testing frequency, and the agents handle everything else, running continuous assessments, adapting their strategies over time, and building contextual knowledge of the system they are protecting. Each detected vulnerability is validated through actual exploitation attempts, drastically reducing false positives and ensuring that only real, actionable issues are surfaced.

NoMac provides cloud macOS virtual machines on Apple silicon for iOS and macOS development. Sessions include macOS, Xcode, iOS simulator runtimes and common developer tools, enabling builds, tests and simulator work without a physical Mac. Developers and coding agents can control sessions through a browser desktop, CLI, SSH, HTTPS API or hosted Model Context Protocol (MCP) server. Workflows include building and testing apps, driving the simulator, capturing screenshots, signing apps and preparing TestFlight uploads. Each session is a fresh virtual machine deleted when stopped. An account drive can retain projects and build caches between sessions. NoMac serves iOS and macOS developers and teams using coding agents that need Xcode, including developers working from Windows or Linux. Usage is billed by the minute from prepaid credit, with a one-minute minimum and per-session spending cap.

omp is an open source AI coding agent and development harness that provides developers with a powerful local environment for AI-assisted engineering. It connects AI models directly to IDE capabilities, debugging tools, code execution, language servers, browser automation, memory, and dozens of built-in development tools. It supports more than 40 AI providers while allowing developers to use a single interface across cloud and local language models. omp enhances coding performance with features such as intelligent code editing, parallel subagents, persistent execution environments, integrated debugging, and advanced code review workflows. It also includes collaborative sessions, local memory, workflow automation, browser control, and GitHub integration to streamline complex software development tasks. Built with a native Rust engine and designed for Windows, macOS, and Linux, omp helps developers build, debug, and maintain software.

Autopilot is an open-source terminal coding agent and SDK for developers working in Git repositories. It reads a repository, plans tasks, edits files and runs commands, with plan, edit and automatic-approval modes. It connects to 25+ hosted model providers using your own credentials, supports local models through Ollama and LM Studio, and works with OpenAI-compatible endpoints. Autopilot runs on macOS, Linux and Windows for interactive sessions and unattended server jobs with runtime, token and cost budgets, checkpoint recovery and email notifications. It supports MCP servers, language-server features, hooks and local memory. Its headless SDK and JSONL-over-stdio RPC enable integration into other applications. On OpenRouter, subagents can run in read-only Hotcell sandboxes with short-lived, spend-capped tokens instead of the provider key. Autopilot is free and MIT-licensed; model-provider usage may incur separate charges.

ADE is an agentic development environment for software developers who use AI coding agents with Git repositories. It organizes parallel tasks in isolated Git worktrees and combines agent chat, multi-agent sessions, terminals, file editing, testing, browser-based QA, automation, and pull-request review in one workspace. Desktop, browser, terminal, and iOS clients sync project activity through an ADE Brain running on a machine you control; Linux can host the Brain without a Linux desktop app. ADE supports Claude Code, Codex, Cursor, Factory Droid, and OpenCode, and connects to GitHub and Linear for pull requests and issue workflows. Developers can review changes, inspect test results, and continue work across devices.

Falcon Spotlight provides real-time visibility across your enterprise — giving you the relevant and timely information you need to reduce your exposure to attacks with zero impact on your endpoints. As part of an integrated platform that prevents exploits and post-exploit activity, Falcon Spotlight™ allows you to research common vulnerabilities and exposures (CVEs) to examine threat actor profiles and targets. Spotlight utilizes scanless technology, delivering an always-on, automated vulnerability management solution with prioritized data in real-time. It eliminates bulky, dated reports with its fast, intuitive dashboard. The cloud-native CrowdStrike Falcon® platform and single lightweight agent collect data once and reuse it many times. As a result, Spotlight requires no additional agents, hardware, scanners or credentials — simply turn on and go.

Synack delivers continuous security validation through its Human + AI platform for continuous pentesting. Sara AI Pentesting, powered by the Synack Autonomous Red Agent, combines agentic AI with the Synack Red Team—the world’s most rigorously vetted community of security researchers—to help organizations proactively reduce risk, stay compliant, and stay ahead of evolving cyber threats. Sara handles reconnaissance, attack surface mapping, and initial exploit validation at scale, while human experts validate real-world exploitability and provide the creativity and judgement automation cannot replicate. Founded by former NSA operatives, Synack has enabled nearly 10 million hours of security testing to protect critical assets, from global financial systems to U.S. Defense Department networks. Synack was recognized by GigaOm’s 2025 PTaaS Radar as both a Leader and Fast Mover, and received Global InfoSec Awards for Market Leader in AI-Powered Cybersecurity and Trailblazer in PTaaS.

sshx is a secure, web-based collaborative terminal platform that lets you share your command-line session with others by sending a unique browser link, enabling multiple participants to interact in real time with remote cursors and chat on an infinite canvas. It is fast, end-to-end encrypted, and lightweight, with a server written in Rust and support across macOS, Linux, and Windows, so users can install a single binary or use it directly in a browser for collaborative sessions. The interface supports arranging and resizing multiple terminals freely, live presence awareness, and ultra-fast mesh networking to connect from anywhere. sshx is ideal for remote pair programming, teaching, debugging, live demonstrations, and collaborative troubleshooting, providing secure access without requiring complex setups or traditional SSH clients, and it can be integrated into workflows, including CI/CD environments for remote debugging and shared terminal access.

Kali Linux is an open-source, Debian-based Linux distribution geared towards various information security tasks, such as Penetration Testing, Security Research, Computer Forensics and Reverse Engineering. You can take any Linux and install pentesting tools on it, but you have to set the tools up manually and configure them. Kali is optimized to reduce the amount of work, so a professional can just sit down and go. A version of Kali is always close to you, no matter where you need it. Mobile devices, Docker, ARM, Amazon Web Services, Windows Subsystem for Linux, Virtual Machine, bare metal, and others are all available. With the use of metapackages, optimized for the specific tasks of a security professional, and a highly accessible and well documented ISO customization process, it's always easy to generate an optimized version of Kali for your specific needs. Whether you are a seasoned veteran or a novice, our documentation will have all the information you will need to know.

CodeWall is an AI-powered autonomous penetration testing platform that continuously finds and validates security vulnerabilities in your applications. Unlike traditional point-in-time pentests, CodeWall deploys AI agents that autonomously map attack surfaces, chain real exploits, and deliver verified proof-of-concept evidence — running continuously alongside your change management and development cycle. Key capabilities: automated reconnaissance and subdomain enumeration, multi-phase exploit chaining, authenticated testing, AI/LLM vulnerability detection, and compliance-tagged findings. Supports web apps, REST/GraphQL APIs, cloud infrastructure, and internal tooling. Integrates with CI/CD pipelines via CLI and REST API.

Fugu-Ultra v1.1 is Sakana AI’s upgraded multi-agent orchestration model for complex coding, agentic work, and advanced reasoning. Rather than relying on one model, it dynamically coordinates a diverse pool of frontier models, selecting and combining specialized agents for each task while presenting the system through a single model interface. The v1.1 orchestration upgrade incorporates newer frontier models and improves performance across every tracked benchmark, with gains of up to 7.9 points over v1.0 and particularly strong results on ProgramBench and Terminal Bench 2.1. Fugu can now be used directly inside Claude Code through Claude Code-compatible endpoints, bringing a coordinated team of models into familiar terminal workflows for writing, debugging, reviewing, and executing code. A one-command installer configures the integration on Ubuntu and macOS, while manual setup is available for Windows and other environments.

Terra offers agentic-AI powered continuous web application penetration testing as a service, combining AI agents with human expert supervision to deliver deep, business-context aware security assessments. It provides full coverage of an organization’s web application attack surface, continuously testing through changes rather than only at fixed intervals. The tool delivers real-time adaptability, meaning newly deployed or updated features are automatically evaluated for vulnerabilities, not waiting for quarterly or annual audits. Terra’s reports are designed to be compliance-audit ready, reflecting proof of exploitability, likelihood, potential breach comparison, and business impact, along with suggestions for remediation. It emphasizes prioritization of real risks, tailored to the customer's business context and risk profile, with visibility across all applications and features. Users benefit from increased efficiency and accuracy over traditional automated pentests.

AIPTx is an AI-powered penetration testing and VAPT platform developed by IntelligenceX. It automates security testing across web applications, APIs, networks, cloud environments, and CI/CD pipelines. AIPTx uses AI agents for reconnaissance, attack-surface discovery, vulnerability identification, exploitation, and validation, helping security teams distinguish exploitable vulnerabilities from unvalidated findings. The platform provides proof-of-concept evidence, risk prioritization, remediation guidance, and compliance-ready reports. It supports continuous security testing, authenticated assessments, API security, web application testing, network testing, and DevSecOps workflows. Findings can be exported and integrated into tools used by security and development teams. AIPTx is designed for authorized security testing only.

SecureCRT client for Windows, Mac, and Linux provides rock-solid terminal emulation for computing professionals, raising productivity with advanced session management and a host of ways to save time and streamline repetitive tasks. SecureCRT provides secure remote access, file transfer, and data tunneling for everyone in your organization. Whether you are replacing Telnet or Terminal, or need a more capable secure remote access tool, SecureCRT is an application you can live in all day long. With the solid security of SSH, extensive session management, and advanced scripting, SecureCRT will help raise your productivity to the nth degree. Highlight individual words, phrases, or substrings in the session window to identify errors in log files or streaming output and to highlight prompts. Regular expressions are also supported, making it easier to highlight strings like IP addresses. Keyword display attributes (bold, reverse video, and color) can be combined.

Automate Your Penetration Testing Tasks. The Penetration testing no longer needs to be complicated. You can simply provide the URLs and APIs that you want to pen test to Pentoma®. It will take care of the rest, and deliver the report to you. Discover critical web weaknesses with the automated pen testing process. Pentoma® analyzes potential attack points from an attacker’s perspective. Pentoma® conducts penetration tests by simulating exploits. Pentoma® generates reports on the findings with detailed attack payloads. Pentoma® offers easy integration options to simplify your pen testing process. Pentoma® is also available for special customization upon request. Pentoma® eases the complicated process for compliance with its automated pen testing capabilities. Pentoma®'s reports help being compliant to HIPAA, ISO 27001, SOC2, and GDPR. Ready to automate your pen testing tasks?

Waycar is a native iPhone and iPad app for developers who want to monitor and control coding agents running on their own Mac or Linux computers. It connects to hosts over SSH and can use mosh for live terminal sessions, with SSH fallback. The app brings agent and shell sessions from herdr or tmux into a console, where users can open terminals, read output, send prompts, respond to supported permission requests, and receive alerts when agents are blocked or done. It supports several coding-agent command-line tools, with controls varying by harness. Hosts must remain powered on and reachable. Waycar does not require an account or route terminal sessions through a cloud service. The free tier allows 10 new or resumed launches per rolling 30 days; Pro removes that limit. Waycar is designed for individual developers using their own machines.

Antgrid is a desktop workspace for developers who run coding-agent command-line tools across one or more computers. It collects agent sessions in a single interface and can connect sessions on a remote machine when remote access is enabled. Developers can inspect agent changes, review and commit work, and use the Android app to reach sessions away from their workstation. Antgrid launches locally installed agent CLIs, including Claude Code, Codex, OpenCode, Cursor, GitHub Copilot, Google Antigravity, Kilo Code, Kimi Code CLI and Mistral Vibe; each agent uses its own configuration and tools. Its Handler feature can manage follow-up steps in long-running sessions, request evidence of completed work, and surface questions for the developer. Antgrid also provides encrypted device-to-device traffic through a relay service. Desktop builds are available for Windows, macOS on Apple silicon and Linux, with a mobile app for Android.

Detectify sets the standard for External Attack Surface Management (EASM), providing 99.7% accurate vulnerability assessments. ProdSec and AppSec teams trust Detectify to expose exactly how attackers will exploit their Internet-facing applications. The Detectify platform automates continuous real-world, payload-based attacks crowdsourced through its global community of elite ethical hackers, exposing critical weaknesses before it’s too late. Detectify is available on the global market, except US-sanctioned countries. It is tech-agnostic, which means you can deploy the scanning engines as long as you are hosted in the cloud. Currently, Detectify is trusted by 1500+ security-conscious companies including popular app-makers King, Trello, Grammarly. No matter how much security knowledge you have, Detectify helps you stay on top of security and build safer web applications.

SuperPentest is a cloud-based autonomous penetration testing platform for security teams assessing web applications, APIs and AI agents. Customers authorize a defined testing scope and provide test identities; the platform explores permitted assets, tests application behavior and business logic, and reports findings with reproducible request and response evidence. Findings are independently replayed in clean sessions before reporting, while inconclusive tests remain identified as such. Reports include remediation guidance and coverage notes, and teams can schedule repeat runs to retest fixes and monitor changes. The product supports one-off assessments as well as recurring plans, with testing limited to an approved written scope.

Agentastic.dev is a native macOS development workspace for software developers using AI coding agents. It combines an editor, terminal, browser, Git tools, and agent sessions so users can launch multiple coding agents and isolate tasks in Git worktrees or containers. Developers can inspect diffs, run code-review workflows, test applications in the built-in browser, and start work from prompts, specifications, or supported issues and team tools. The product supports a catalog of coding-agent command-line tools and allows custom terminal-based agents. Work can run locally, on SSH-accessible development machines, or in supported cloud environments. An iPhone companion lets users monitor sessions and respond when agents need input. The macOS app is free; subscriptions and API usage for third-party agents are paid to those providers.

VisuaLeaf is a cross-platform database GUI for MongoDB, PostgreSQL, MySQL, SQL Server, and Oracle. It helps developers explore and edit data, build queries and MongoDB aggregation pipelines visually, create and reverse-engineer schema diagrams, manage indexes, analyze query performance, and work with an integrated MongoDB shell and SQL editor. VisuaLeaf also includes collection comparison, data synchronization, task automation, data masking, import and export tools, charts, dashboards, user management, and secure SSH and SOCKS5 connections. It is available for Windows, macOS, and Linux.

Automater is a desktop companion for developers who use several AI coding assistants and agents. It reads recognized transcript files that those tools save locally, organizes session histories into a searchable library, and displays agent activity, sessions waiting for attention, and usage indicators across supported providers in a system-tray panel. Automater Lite is available for Windows, macOS on Apple silicon, and Linux. Its local archive is stored on the user's computer, and resuming a session is available where the original tool supports it. The free Lite edition works without an account; the paid PRO edition adds managed sessions, agent controls, and fleet features. It is designed to help developers keep track of work across multiple coding tools, rather than replace those tools or provide the coding agents themselves.

This single, fully integrated solution conducts active, passive and agent-based assessments while its extensive flexibility evaluates risk according to each business. SAINT’s impressive, flexible and scalable scanning capabilities set it apart from many others in this space. SAINT has partnered with AWS, allowing its customers to take advantage of AWS’s efficient scanning. Should subscribers prefer, SAINT also offers a Windows scanning agent. Security teams can schedule scans easily, configure them with considerable occurrence flexibility and fine-tune them with advanced options. As a vulnerability management solution, SAINT Security Suite’s security research and development efforts focus on investigation, triage, prioritization, and coverage of vulnerabilities of the highest levels of severity and importance. Not willing to settle for just blanket coverage and raw data, our analysts focus on developing tools for what matters to our customers.

Ante is a self-contained coding agent that lives in your terminal and self-organizes. One ~15MB Rust binary, zero runtime dependencies, works with 12+ providers or fully offline with local GGUF models. Continuously evaled in public: #1 same-model agent on Terminal-Bench 2.1, every result pinned to a build you can download and audit.

Vibe Island is a macOS notch panel for AI coding agents. It tracks sessions from 26 agents - Claude Code, Codex, Gemini CLI, Cursor, OpenCode, Kimi Code, DeepSeek, Copilot, and more - in one place, with real-time status, per-agent brand colors, and one-click precise jump to the exact terminal tab, split pane, or VS Code window where each session runs (20+ terminals supported, tmux included). Built for developers running several agents in parallel, it also shows remaining usage quota for Claude, Codex, Kimi, GLM, and DeepSeek subscriptions with live reset countdowns, and lets you approve permissions, answer agent questions, and review plans without leaving the notch. Works with local sessions and remote servers over SSH. Native Swift, no Electron, under 100 MB RAM. Free trial, then a one-time purchase - no subscription.

T3 Code is a minimal web GUI for coding agents like Codex, built to give agents a better place to work than a terminal. It is free, open source, fast, and designed so you can install it, plug in the harness you already pay for, and let your agents get to work. It provides a clean, modern interface for interacting with AI coding assistants through both web and desktop applications, with session management, persistent state, thread management, and real-time collaboration. Developers can interact with coding agents through an intuitive chat-based interface, manage coding sessions across projects, track changes with built-in git integration and checkpointing, and control access through Full Access and Supervised runtime modes. T3 Code is built to be modifiable, customizable, and forkable, with an MIT license, commercial-friendly use, TypeScript, strict end-to-end typing, and a monorepo that includes desktop, web, server, and harnesses.

Strobes is an AI-powered exposure management platform designed to help security teams continuously discover, validate, prioritize, and remediate critical risks. The platform connects attack surface management, application security posture management, risk-based vulnerability management, AI pentesting, penetration testing as a service, integrations, workflows, analytics, and reporting into one continuous system. Strobes uses AI agents to analyze vulnerabilities in business context, validate exploitability, reduce false positives, and guide teams toward the exposures that matter most. Its platform integrates with more than 100 security and engineering tools, including scanners, cloud systems, code tools, ticketing platforms, communication tools, and SIEM solutions. Security teams can use Strobes to reduce remediation backlogs, improve visibility, automate triage, route issues, verify fixes, and maintain audit readiness.

A powerful open source cross-platform security terminal simulation software, it supports SSH/SFTP/TELNET/RDP/VNC and other mainstream protocols. Support multiple key authentication methods, support SFTP session data backup and synchronization, support multiple sets of skin interface, support tunnel management, support script design, support multiple labels and floating Windows, support administrator mode, support 4K remote desktop, compatible with various VNC remote desktop, support session group management.

StateFabric a small infrastructure layer for AI agents that need more context than chat history. Once an agent starts using tools, running for longer sessions between restarts, ‘keep the messages in memory’ doesn’t really cut it. You need to know: - what happened? - what state changed? - which tools were called? - what context should go into the next model turn? StateFabric stores an append-only event log for agent runs, then derives working context from it. Today it supports: - Durable sessions and event storage - User/model/tool event timelines - Reconstructed session state from stored events - Compacted model-facing context - A dashboard for inspecting sessions, raw payloads, compaction artefacts, and usage - Google ADK integration via @statefabric/adk - Direct Node/REST usage via @statefabric/client (for custom runtimes)

ZeroThreat.ai is an AI-powered penetration testing platform that identifies and validates real, exploitable vulnerabilities across modern web applications and APIs. Using Agentic AI, it executes adaptive attacker workflows to simulate real-world attack paths, proving impact and eliminating false positives. The platform leverages continuously updated vulnerability checks with proof-based validation, real-time CVE coverage and Application Journeys (Playwright-powered) to test authenticated flows, APIs, and complex business logic beyond traditional crawling. It also integrates custom and community-driven attack templates to extend coverage and reflect real-world attack techniques. By focusing on verified findings rather than raw vulnerability counts, ZeroThreat.ai reduces manual triage by over 90% and enables security teams to prioritize and remediate actual risk with confidence, while maintaining continuous, production-safe testing across environments.

bmux is a desktop web browser for developers, researchers, and people working alongside browser agents. It arranges tabs in split panes and named sessions within one window, while separate profiles isolate logins and browser storage. Keyboard-focused tools include shortcuts, Vim-style navigation, click hints, and floating reference panes. Its command-line interface can control a selected pane to navigate pages, inspect the DOM, click, type, and take screenshots; sessions can continue in the background and be attached for review. Mobile viewport presets and per-profile proxy settings support browser automation workflows. bmux is free and open source under GPLv3. Desktop editions are listed for macOS and Windows, with Linux available as a portable host for remote browser access. It is an early preview and does not require tmux.

Automated Penetration Testing from Clone Systems is a browser-based security testing service for teams that need to assess external and internal infrastructure, Active Directory, cloud environments, web applications, and supported APIs. Users define targets and exclusions in a portal, then launch production-safe attack playbooks that attempt to validate whether weaknesses are exploitable. Findings include severity and exploit evidence, remediation guidance, and mapping to MITRE ATT&CK; teams can rerun tests after fixes during the 30-day testing window. Reports provide an executive summary and technical details for security and compliance workflows, including PCI DSS 4.0.1, HIPAA, SOC 2, and ISO 27001. Clone Systems also offers separately scoped, engineer-led penetration testing for engagements requiring human-led assessment.

Phishing Club is an open source phishing simulation and red team phishing framework for authorized security testing. Self host it on your own server via a one line installer or Docker. Plan, launch, and measure realistic campaigns from a single Go binary with an embedded web UI, HTTP/HTTPS phishing servers, and a REST API. Features: multi stage phishing flows, flexible scheduling, multiple domains with automatic TLS, SMTP or custom API delivery with OAuth, recipient groups with CSV import and SCIM, PDF campaign reports, analytics, multi tenancy, MFA and SSO (Entra ID, OIDC), webhooks, and in app updates. Red team and AiTM: reverse proxy phishing to capture sessions, remote browser phishing, DOM and URL rewriting, dynamic obfuscation, JA4 and geo IP filtering, and device code phishing.

Kavor is a local-first desktop workspace for software developers coordinating coding-agent work. It brings provider-native coding-agent sessions, including Claude Code and Codex, together with Specifications, diagrams, files, terminals and a shared browser. Developers can create diagrams with Mermaid, PlantUML, Graphviz and D2, edit Excalidraw canvases, view draw.io files, and keep decisions and review evidence with project work. Kavor also displays usage for supported provider accounts and can rotate eligible accounts between turns. Agent Kavor for WhatsApp lets users send instructions and answer questions remotely while the desktop app remains running, signed in and online. Kavor is available for macOS, Windows and Linux. Provider subscriptions and API usage are separate from Kavor.

Remote access tools can be messy—different clients, unmanaged credentials, and no clear visibility. Remote Desktop Manager changes that. It centralizes all your remote connections in one place, with support for RDP (Remote Desktop Protocol), SSH (Secure Shell), Telnet, VPNs (Virtual Private Network), and many other protocols. Users get cross-platform access from Windows, macOS, Linux, and mobile. Sessions can be launched in 1 click, while credentials are stored in shared or personal vaults. All activity is tracked, and role-based access control ensures least-privilege enforcement. The Remote Connection & IT Management package enhances RDM with Devolutions Gateway for secure, just-in-time tunnels; Hub or Server for credential storage; and session audit logs to meet compliance requirements. Everything integrates seamlessly through RDM’s interface. It’s a streamlined, policy-driven solution for IT teams that want full control over remote access without bouncing between tools.

boat provides powerful cloud virtual machines and persistent sandboxes built for long-running AI agents, allowing users to spawn thousands of cloud computers with browsers and persistent files without managing the entire infrastructure themselves. Each sandbox is a full Ubuntu Linux virtual machine with SSH and SCP access, Docker support, dedicated IPv4 or IPv6 addresses, a 60 fps virtual desktop, and fast disk-level forking from snapshots. Docker, VS Code, Chrome, Ghostty, GitHub CLI, Rust, Node.js, and Bun come pre-installed, enabling users to run any development tool, language, or workflow. Boat supports agents such as Claude Code, Codex, and OpenCode, with tools to prompt, observe, and control agent environments remotely through its CLI, HTTP API, and Python or TypeScript SDKs. Users can execute commands, copy files, monitor agent messages and tool calls, host applications through public HTTPS URLs, and access integrated desktops and browsers.

AWS Security Agent is a new frontier AI-powered agent that proactively secures your applications throughout the development lifecycle, from design and architecture planning, through code changes, to deployment and penetration testing. It lets security teams define organizational security requirements (for example, approved auth libraries, encryption standards, logging practices, data-access policies) once in the AWS Console; then the agent automatically validates design documents, architectural plans, and code against those standards. Before a single line of code is written, AWS Security Agent can perform a design review, analyzing architectural documents uploaded into the web application (or ingested from storage), and flag potential security risks or non-compliance with custom or Amazon-managed standards, providing remediation guidance.

WezTerm is a high-performance, cross-platform terminal emulator and multiplexer built in Rust that delivers GPU-accelerated rendering, including ligatures, color emoji, true color, dynamic color schemes, and hyperlinks, and modern windowing controls such as panes, tabs, and multiple windows on both local and remote hosts. Its single-process multiplexer provides scrollback, searchable history, mouse integration, Quick Select mode for rapid selection, Copy mode, shell integration, support for the iTerm image protocol, SSH connectivity, serial ports, Arduino devices, and workspace/session management via Lua-configurable scripts. Configuration is handled through a wezterm.lua file with hot-reload support, while a rich command-line interface (wezterm cli) lets you spawn programs, manipulate tabs and panes, and set domains. WezTerm adheres to ECMA-48 and xterm conventions for full ANSI/ISO compliance and offers native UI integration using platform-specific APIs.