Skip to content
Our open-source security work.See the research
Open source

What we publish, what we sponsor, who we work with.

Sebastion AI is free for public repos. We sponsor a handful of OSS projects we depend on, and we publish security findings upstream wherever the maintainers will have us.

Open source

Where Sebastion is shipping

Search merged pull requests from Sebastion across widely used open-source repos.

Language

Severity

Showing 43 of 43 projects

JavaScript

mrdoob/three.js

112.8k

JavaScript 3D Library.

RAG framework

infiniflow/ragflow

81.6k

RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs

Developer tool

Eugeny/tabby

71.8k

A terminal for a more modern age

Scraping & automation

NaiboWang/EasySpider

43.9k

A visual no-code/code-free web crawler/spider易采集:一个可视化浏览器自动化测试/数据采集/网页爬虫软件,可以无代码图形化的设计和执行爬虫任务。别名:ServiceWrapper面向Web应用的智能化服务封装系统。

39.6k

LLM驱动的 A/H/美股智能分析:多数据源行情 + 实时新闻 + LLM决策仪表盘 + 多渠道推送,零成本定时运行,纯白嫖. LLM-powered stock analysis system for A/H/US markets.

RAG framework

HKUDS/LightRAG

36k

[EMNLP2025] "LightRAG: Simple and Fast Retrieval-Augmented Generation"

33.5k

AI Agent Assistant & development framework that integrates lots of IM platforms, LLMs, plugins and AI feature, and can be your openclaw alternative. ✨

Developer tool

soxoj/maigret

31.2k

🕵️‍♂️ Collect a dossier on a person by username from 3000+ sites

MCP server

labring/FastGPT

28.2k

FastGPT is a knowledge-based platform built on the LLMs, offers a comprehensive suite of out-of-the-box capabilities such as data processing, RAG retrieval, and visual AI workflow orchestration, letting you easily develop and deploy complex question-answering systems without the need for extensive setup or configuration.

27.6k

Project N.O.M.A.D, is a self-contained, offline survival computer packed with critical tools, knowledge, and AI to keep you informed and empowered—anytime, anywhere.

27.1k

A modern ebook manager and reader with sync and backup capacities for Windows, macOS, Linux, Android, iOS and Web

26.3k

GitHub 汉化插件,GitHub 中文化界面。 (GitHub Translation To Chinese)

21.1k

🔥 MaxKB is an open-source platform for building enterprise-grade agents. 强大易用的开源企业级智能体平台。

RAG framework

langbot-app/LangBot

16.2k

Production-grade platform for building agentic IM bots - 生产级多平台智能机器人开发平台. 提供 Agent、知识库编排、插件系统 / Bots for Discord / Slack / LINE / Telegram / WeChat(企业微信, 企微智能机器人, 公众号) / 飞书 / 钉钉 / QQ / Satori e.g. Integrated with ChatGPT(GPT), DeepSeek, Dify, n8n, Langflow, Coze, Claude, Gemini, MiniMax, Ollama, SiliconFlow, Moonshot, GLM, openclaw / hermes agent

15.9k

🏛️ 三省六部制 · OpenClaw Multi-Agent Orchestration System — 9 specialized AI agents with real-time dashboard, model config, and full audit trails

14.2k

📻Terminal/ssh/sftp/ftp/telnet/serialport/RDP/VNC/Spice client(linux, mac, win)

10.6k

Give your agents the power of the Hugging Face ecosystem

8k

PraisonAI 🦞 — Hire a 24/7 AI Workforce. Stop writing boilerplate and start shipping autonomous self-improving agents that research, plan, code, and execute tasks. Deployed in 5 lines of code with built-in memory, RAG, and support for 100+ LLMs.

Developer tool

steipete/summarize

6.1k

Point at any URL/YouTube/Podcast or file. Get the gist. CLI and Chrome Extension.

5.8k

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

5.4k

ZenML 🙏: One AI Platform from Pipelines to Agents. https://zenml.io.

5.2k

The RL Bridge for LLM-based Agent Applications. Made Simple & Flexible.

MCP server

nanbingxyz/5ire

5.2k

5ire is a cross-platform desktop AI assistant, MCP client. It compatible with major service providers, supports local knowledge base and tools via model context protocol servers .

4.8k

AutoRAG: An Open-Source Framework for Retrieval-Augmented Generation (RAG) Evaluation & Optimization with AutoML-Style Automation

RAG framework

gptme/gptme

4.3k

Your agent in your terminal, equipped with local tools: writes code, uses the terminal, browses the web. Make your own persistent autonomous agent on top!

3.5k

An MCP server plus a CLI tool that indexes local code into a graph database to provide context to AI assistants.

MCP server

av/harbor

3k

Stop configuring your AI stack. Start using it. One command brings a complete pre-wired LLM stack with hundreds of services to explore.

Observability

operacle/checkcle

2.7k

CheckCle is a self-hosted, open-source monitoring platform for seamless, real-time full-stack systems, applications, and infrastructure. It provides real-time uptime monitoring, distributed checks, incident tracking, and alerts. All deployable anywhere.

2.5k

Control Gmail, Google Calendar, Docs, Sheets, Slides, Chat, Forms, Tasks, Search & Drive with AI - Comprehensive Google Workspace / G Suite MCP Server & CLI Tool

2.1k

A unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies.

2.1k

🕵️‍♂️ (2-in-1) Email & Username OSINT suite. Analyzes 205+ scan vectors (100+ email / 105+ username) for security research, investigations, and digital footprinting.

1.9k

Semantic Intelligence for Large-Scale Engineering. Context+ is an MCP server designed for developers who demand 99% accuracy. By combining RAG, Tree-sitter AST, Spectral Clustering, and Obsidian-style linking, Context+ turns a massive codebase into a searchable, hierarchical feature graph.

1.4k

MCP Server for kubernetes management commands

1.4k

Grounded Docs MCP Server: Open-Source Alternative to Context7, Nia, and Ref.Tools

1.3k

Full-stack AI app generator — FastAPI + Next.js with AI Agents, RAG, streaming, auth, and 20+ integrations out of the box.

1.3k

Self-host the powerful Chatterbox TTS model. This server offers a user-friendly Web UI, flexible API endpoints (incl. OpenAI compatible), predefined voices, voice cloning, and large audiobook-scale text processing. Runs accelerated on NVIDIA (CUDA), AMD (ROCm), and CPU.

1.2k

AIPex: AI browser automation assistant, no migration and privacy first. Alternative to Manus Browser Operator、 Claude Chrome and Agent Browser

AI agent

aegra/aegra

947

Open source alternative to LangGraph Platform (now LangSmith Deployments) - Self-hosted AI agent backend with FastAPI and PostgreSQL. Zero vendor lock-in, full control over your agent infrastructure.

831

MCP Server for SearXNG

746

📄 Production-ready MCP server for PDF processing - 5-10x faster with parallel processing and 94%+ test coverage

744

A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API

650

This NVIDIA RAG blueprint serves as a reference solution for a foundational Retrieval Augmented Generation (RAG) pipeline.

553

The Ultimate Google Docs, Sheets, Drive, Gmail, & Google Calendar MCP Server. This MCP (primarily for use in Claude Desktop) gains full access to your google suite and lets claude do its thing.

For maintainers

Sebastion AI is free on public repos. Forever.

Open Connect for any public GitHub or GitLab repository and get inline security review on every PR/MR at no cost. We do this because we'd rather catch the next Log4Shell early than add another signup wall.

  • 50 audits per repo per month, no credit card.
  • CWE-tagged findings + OSV.dev cross-checks.
  • Powered by a fast frontier model.
Disclosures

Bugs we find. Patches we ship.

When Sebastion finds a vulnerability in an open-source dependency, we report it upstream through coordinated disclosure. Patches are submitted under our individual names where the project allows it; CVE credit lands on the reporter, not on Foundation Machines.

See our merged fixes and contributions below.