Skip to content

Back to the catalog

becomingahacker.orgarticle

AI Agents for Cybersecurity: A Guided Tour of a Repository with Tons of Resources and Examples

Guided tour of Omar Santos's eight-part AI-agents-for-cybersecurity repository. It moves from LLM building blocks (LangChain, RAG) to security agents built with LangGraph, CrewAI, DeepAgents and MCP servers (nmap, CISA KEV, Shodan). It also covers a hardening guide for six agentic frameworks, token-cost control, and a spec for a supervisor-led, human-gated assessment harness. Design lessons include least-privilege subagents, single-use approvals and kill switches.

TL;DR Walks through Omar Santos's repo of security-agent examples, from RAG basics to MCP servers, framework hardening, token costs and a human-gated harness spec.
Also seen from another angle🛡️ Security →

Organisations named here

  • OWASP
  • CISA

Technologies named here

  • Project CodeGuard
  • nmap
  • LangChain
  • LangGraph
  • CrewAI
  • DeepAgents
  • MCP servers
  • Model Context Protocol
  • Shodan
  • CISA KEV

Standards and laws named here

  • OWASP Top 10 for Agentic Applications

Techniques named here

  • RAG

Concepts named here

  • Human-gated approval
  • Kill switch
  • Least privilege
  • OWASP Top 10 for Agentic Applications

Also named here

  • Omar Santos