Open security tooling for everyone.
Basic protections should not depend on an enterprise budget. SolonGate Commons is our open-source program.
Maintained bySOLONGATE LLC, which also builds commercial products on related technology.
What every Commons project shares
Local-first
Runs on your machine.
No telemetry
Your data stays yours.
Apache 2.0
Use it, change it, ship it.
Verifiable
SLSA provenance, OpenSSF badges.
Security for AI agent actions
Agent Security Gateway
Checks every tool call an AI coding agent makes against your policy, before it runs.
- Allow or deny by path, command, file or URL
- Secret detection that can redact or block
- Paths the operating system itself refuses
- A sandbox holding only the project
- A local audit trail of every decision
- License
- Apache-2.0
- Agents
- Claude Code, Codex CLI, Antigravity CLI, OpenCode
- Runs
- Locally. No account, no telemetry.
Install
$ git clone https://github.com/solongate/agent-security.git$ cd agent-security && ./scripts/install.sh
Vulnerability impact for shipped products
PSIRTMap
Maps newly disclosed vulnerabilities to the product releases you have actually shipped.
- Imports CycloneDX inventories
- Matches against local OSV and CISA KEV data
- Reports potential impact per release
- Records human assessments, append-only
- Works offline, with optionally signed feeds
- License
- Apache-2.0
- For
- Device, firmware and embedded-software makers
- Status
- Pre-1.0
Install
$ curl -fsSL https://raw.githubusercontent.com/solongate/psirtmap/main/scripts/install.sh | shContributions welcome.
Issues and pull requests on GitHub. Security reports go privately, through each project’s security policy.