0 README

The project's README from github.com/0sec-labs/0. As one markdown file: README.md.

Software already builds software. Now it can secure itself, too.

0security

The open-source, self-evolving, multi-model harness for security research.
The Swiss Applied AI & Cybersecurity Research Lab
0.security · Documentation · FoxGuard

License: MIT OR Apache-2.0 Latest release Status: research preview

Zero studies, finds, fixes, reports, and improves.

The harness behind our research breakthroughs.

Find novel vulnerabilities in the deepest layers of software. Explore our public disclosures and upstream fixes, including research in the Linux kernel.

Get started

Docs for your agent

Copy this prompt into your coding agent:

Set up the 0.security harness using https://0.security/harness/setup.md and read https://0.security/llms.txt for the documentation index. Confirm my targets and scope before testing, and ask before changing files.

Quick install

curl -fsSL https://raw.githubusercontent.com/0sec-labs/0/main/install.sh | bash
0

Bring your model access and configure connections in the terminal. Run locally or through the CLI in CI/CD, inspect findings and verification results, and export reports as JSON, Markdown or SARIF.

Setup guide · Research workflows · Documentation

Built for security research

Available on 0.security

Optimized Model Routing: The best LLM for each step

The managed service adds model routing, non-public frontier cyber models, a purpose-built attack runtime and a curated offensive toolchain. These hosted capabilities are separate from running the open-source harness with your own model access. Explore 0.security.

Make software secure itself.

The world's best security should belong to everyone. Software already writes itself; we believe it should secure itself, too. Our goal is security that finds and fixes vulnerabilities as software changes, so people can focus on what they want to create.

Research comes first. Public disclosures, upstream fixes and reproducible results let people check our work. Open tools let them question it, extend it and build something better. Self-securing software is the future we're working toward.

Read our manifesto · Explore our research

Status

This is a research preview. Coverage and verification depth vary by workflow; inspect the evidence and review generated fixes before applying them. Tool making and evaluated self-improvement are developing research workflows. Only test systems you own or are authorized to assess.

Contributing

Read CONTRIBUTING.md to build and extend the harness. Report security issues through SECURITY.md.

License

MIT OR Apache-2.0.

0 (0sec-labs/0)

Searching Database…

512 ·GitHub
这是什么?0 是一个用于安全研究的开源、自我演进、多模型 AI 框架,能够发现、验证并修复漏洞,由瑞士应用 AI 与网络安全研究实验室构建。
这是独立工具,还是需要托管版 0.security 服务?它是一个自包含的开源框架,可以使用你自己的模型访问权限在本地或 CI/CD 中通过 CLI 运行;托管的 0.security 服务是单独的、可选的付费层,提供额外的模型路由和工具。
怎么让它跑起来?把提供的安装提示词复制到你的编程智能体中以安装框架并阅读文档,或者进行快速安装,并在终端中配置好你自己的模型访问权限。
我需要自己的 LLM API 访问权限吗?需要,你要自带模型访问权限并自行配置连接;这个开源框架不附带内置模型。
目前的发现结果有多可靠?这是一个研究预览版,覆盖范围和验证深度因工作流而异,你应当在采用之前检查证据并审查生成的修复。
我可以把它指向任何我想测的目标吗?不行,你只能测试你拥有的或明确获权评估的系统。
托管的 0.security 服务是做什么的?它在开源框架之上增加了优化的模型路由、对非公开前沿网络模型的访问、专门构建的攻击运行时,以及经过筛选的攻击性工具链。
对这个框架来说,自我改进是什么意思?该框架会对自己的智能体和工具提出修改建议,根据基准进行评估,并保留表现更好的版本供以后的运行使用。
为什么它被称为多人进攻性安全操作系统?它把聚焦的调查任务分派给多个拥有全新上下文和有限预算的子智能体,然后把它们的发现汇总到一个工作流中。
它输出什么格式?发现和验证结果可以导出为 JSON、Markdown 或 SARIF 报告。
Creator
0sec-labs
Size
103.8 MB
Stars
512
Age
1mo
Commits · 90 Days