{"generated":"2026-08-22","source":"https://www.haiec.com/developer-products.json","products":[{"slug":"ai-appsec","canonicalName":"AI AppSec","packageName":"ai-appsec","version":"0.1.0","registry":"npm","productLayer":"source","category":"developer-security","shortDescription":"Evidence-backed static security analysis for AI applications and agents.","longDescription":"Audit AI application and agent source code before commit, push, merge, or deployment — with explicit coverage, reproducible findings, and tamper-evident security evidence. Uses Semgrep 1.173.0 as its execution engine with a bundled Public Core rulepack.","canonicalUrl":"/ai-appsec","githubUrl":"https://github.com/subodhkc/ai-appsec","npmUrl":"https://www.npmjs.com/package/ai-appsec","mcpIdentifier":"io.github.subodhkc/ai-appsec","mcpTransport":"stdio","mcpTools":[{"name":"scan_ai_security","description":"Scan AI/LLM/agent application source code for security risks. Returns findings with coverage, concern families, and scan receipt.","write":false}],"supportedLanguages":["Python","TypeScript","JavaScript","JSX","TSX"],"supportedFrameworks":["LangChain","LlamaIndex","Vercel AI SDK","OpenAI SDK","Anthropic SDK"],"detectorCount":122,"checkCount":79,"executionModel":"Semgrep 1.173.0 (external engine) with bundled Public Core rulepack. Static analysis only — does not execute target code.","evidenceOutputs":["Scan Receipt (SHA-256 digests for finding set, concern families, coverage, evaluated checks)","Evidence Envelope (binds receipt to execution context, producer identity, target identity)","Proof-of-fix comparison (STILL_PRESENT, NEW, NOT_VERIFIABLE)","Coverage accounting (DISCOVERED, INTENTIONALLY_EXCLUDED, UNSUPPORTED, TARGETED, ENGINE_REPORTED_SCANNED, PARSE_FAILED, SUCCESSFULLY_ANALYZED)"],"limitations":["Static analysis only — no runtime behavioral evidence","No compliance certification or assessment","No tenant isolation checking (roadmap)","No LLM content verification (roadmap)","No deploy security gating (roadmap)","PARTIAL scans cannot prove absence of findings","Requires Semgrep 1.173.0 (exact version match, installed separately)","Only scan_ai_security tool implemented in v0.1"],"installCommand":"npm install -g ai-appsec","mcpConfig":"{\n  \"mcpServers\": {\n    \"ai-appsec\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"ai-appsec\"]\n    }\n  }\n}","cliCommand":"ai-appsec","releaseDate":"2026-08-18","lastVerifiedDate":"2026-08-22","changelogUrl":"https://github.com/subodhkc/ai-appsec/releases","trustUrl":"https://github.com/subodhkc/ai-appsec/security/advisories/new","license":"MIT","status":"prerelease","roadmapItems":["Tenant isolation checking (scan_tenant_isolation)","LLM/runtime content verification (verify_llm_content)","Deploy security gating (check_deploy_security)","Native deterministic dataflow analysis","Runtime evidence","Inventory evidence","Regulatory evidence","Compliance/assurance integration"]},{"slug":"mcp-tenant-isolation","canonicalName":"MCP Tenant Isolation","packageName":"mcp-tenant-isolation","version":"2.0.0","registry":"npm","productLayer":"boundary","category":"developer-security","shortDescription":"Static analysis scanner for MCP server code and multi-tenant SaaS. Detects cross-tenant data leakage before production.","longDescription":"Detect cross-tenant security gaps across queries, APIs, caches, files, credentials, sessions, vector stores, and MCP tools before they become production data leaks. 57 deterministic rules covering tenant isolation, tool visibility, cache key scoping, RLS, IDOR, and credential vault isolation.","canonicalUrl":"/mcp-tenant-isolation","githubUrl":"https://github.com/subodhkc/mcp-tenant-isolation","npmUrl":"https://www.npmjs.com/package/mcp-tenant-isolation","dockerUrl":"https://hub.docker.com/r/subodhkc/mcp-tenant-isolation","mcpIdentifier":"io.github.subodhkc/mcp-tenant-isolation","mcpTransport":"stdio","mcpTools":[{"name":"scan_tenant_isolation","description":"Scan a project path. Returns structured findings with completeness, coverage, concern families, and receipt.","write":false},{"name":"list_tenant_isolation_rules","description":"Returns all 57 rules with metadata. Filterable by category.","write":false},{"name":"explain_tenant_isolation_rule","description":"Returns rule details, OWASP mapping, CWE IDs, fix suggestions.","write":false},{"name":"suppress_tenant_isolation_finding","description":"Add a suppression with reason, approver, controls, and expiry. Hidden by default — requires --allow-write-tools.","write":true}],"supportedLanguages":["TypeScript","JavaScript"],"supportedFrameworks":["Next.js","Express","Fastify","Prisma","Drizzle"],"ruleCount":57,"executionModel":"Babel AST parser for TypeScript/JavaScript. Dedicated Prisma schema parser. SQL migration parser for RLS detection. MCP SDK import detection. IR and Flow Graph with intra-procedural taint tracking.","evidenceOutputs":["Scan Receipt (SHA-256 hash, rulepack digest, timestamp)","Evidence Envelope for verifiable scan artifacts","v2 semantic fingerprints (stable under line movement)","Proof-of-fix tracking (STILL_PRESENT, NEW, NOT_VERIFIABLE)","Completeness status (COMPLETE, PARTIAL, ERROR)","Coverage accounting (files discovered, parsed, failed, rules evaluated)","8 concern families for triage grouping","SARIF 2.1.0 output for GitHub Code Scanning"],"limitations":["Intra-procedural flow analysis only — does not trace across function calls, files, or middleware boundaries","No runtime verification — cannot verify database-level RLS enforcement or middleware execution","TypeScript and JavaScript only — Python, Go, Ruby not supported yet","False positives are possible — pattern-based detection with FP filtering","MCP stdio transport only — remote/HTTP transport not supported in v2.0"],"installCommand":"npm install -g mcp-tenant-isolation","mcpConfig":"{\n  \"mcpServers\": {\n    \"tenant-isolation\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"mcp-tenant-isolation\", \"mcp\"]\n    }\n  }\n}","cliCommand":"mti","releaseDate":"2026-08-18","lastVerifiedDate":"2026-08-22","changelogUrl":"https://github.com/subodhkc/mcp-tenant-isolation/blob/main/CHANGELOG.md","trustUrl":"https://github.com/subodhkc/mcp-tenant-isolation/blob/main/SECURITY.md","license":"MIT","status":"released","roadmapItems":["Python support (FastAPI, Django, Flask)","SQLAlchemy ORM analysis","Watch mode (mti scan --watch)","VS Code extension","Runtime two-tenant adversarial test harness","Go and Ruby language support","Incremental scanning with AST cache"]},{"slug":"llmverify","canonicalName":"LLMVerify","packageName":"llmverify","version":"1.6.1","registry":"npm","productLayer":"runtime-io","category":"developer-security","shortDescription":"Local-first verification, PII redaction, prompt-injection defense, and runtime monitoring for any LLM.","longDescription":"A safety layer that sits between your LLM and your users. Deterministic, pattern-based engines run locally — no model calls, no network on the free tier. Same input plus same rules equals same result. Every result carries an explicit limitations array stating what was and was not checked.","canonicalUrl":"/llmverify","githubUrl":"https://github.com/subodhkc/llmverify-npm","npmUrl":"https://www.npmjs.com/package/llmverify","supportedLanguages":["TypeScript","JavaScript"],"supportedFrameworks":["OpenAI SDK","Anthropic SDK","LangChain","Any LLM client"],"executionModel":"Deterministic, pattern-based engines running locally. No model calls, no network on free tier. Free tier limit: 500 verification calls/day (tracked locally).","evidenceOutputs":["Risk level and findings per verification","Explicit limitations array per result","Hash-only audit log entries (SOC 2 / HIPAA / GDPR evidence)","Runtime monitoring metrics (latency, token drift, behavioral changes)"],"limitations":["Cannot definitively prove hallucinations — signals are pattern-based, not ground-truth verification","Does not replace human review — use to triage, not to approve","PII detection is regex-based (~90% for standard formats, lower for variations)","Prompt-injection detection is pattern-based — novel or obfuscated injections can evade it","Free tier is 100% local — ML-enhanced features require paid tier and explicit API key","No MCP server — integration via SDK, CLI, or local HTTP only"],"installCommand":"npm install llmverify","cliCommand":"npx llmverify","releaseDate":"2026-08-21","lastVerifiedDate":"2026-08-22","changelogUrl":"https://github.com/subodhkc/llmverify-npm/releases","trustUrl":"https://github.com/subodhkc/llmverify-npm/blob/main/SECURITY.md","license":"MIT","status":"released","roadmapItems":["ML-enhanced detection features (paid tier)","Additional framework integrations"]},{"slug":"haiec-openai","canonicalName":"@haiec/openai","packageName":"@haiec/openai","version":"1.0.0","registry":"npm","productLayer":"inventory","category":"inventory-instrumentation","shortDescription":"OpenAI SDK wrapper with automatic usage tracking and cost calculation for HAIEC AI Inventory.","longDescription":"Drop-in wrapper around the OpenAI SDK that automatically tracks usage and calculates costs. Feeds instrumentation data into HAIEC AI Inventory for discovery, cataloging, and monitoring. This is an instrumentation package, not a security scanner.","canonicalUrl":"/ai-inventory","githubUrl":"https://github.com/subodhkc/haiec-sdk","npmUrl":"https://www.npmjs.com/package/@haiec/openai","supportedLanguages":["TypeScript","JavaScript"],"supportedFrameworks":["OpenAI SDK >=4.0.0"],"executionModel":"SDK wrapper — wraps OpenAI client calls and emits usage events to HAIEC Inventory.","evidenceOutputs":["Usage events (tokens, cost, model, timestamp) fed to HAIEC AI Inventory"],"limitations":["Instrumentation only — does not scan code or verify security","Not a security scanner — does not detect vulnerabilities","Requires HAIEC AI Inventory for data aggregation and reporting"],"installCommand":"npm install @haiec/openai","releaseDate":"2026-01-28","lastVerifiedDate":"2026-08-22","license":"MIT","status":"released","roadmapItems":[]},{"slug":"haiec-anthropic","canonicalName":"@haiec/anthropic","packageName":"@haiec/anthropic","version":"1.0.0","registry":"npm","productLayer":"inventory","category":"inventory-instrumentation","shortDescription":"Anthropic Claude SDK wrapper with automatic usage tracking and cost calculation for HAIEC AI Inventory.","longDescription":"Drop-in wrapper around the Anthropic SDK that automatically tracks usage and calculates costs. Feeds instrumentation data into HAIEC AI Inventory for discovery, cataloging, and monitoring. This is an instrumentation package, not a security scanner.","canonicalUrl":"/ai-inventory","githubUrl":"https://github.com/subodhkc/haiec-sdk","npmUrl":"https://www.npmjs.com/package/@haiec/anthropic","supportedLanguages":["TypeScript","JavaScript"],"supportedFrameworks":["Anthropic SDK >=0.20.0"],"executionModel":"SDK wrapper — wraps Anthropic client calls and emits usage events to HAIEC Inventory.","evidenceOutputs":["Usage events (tokens, cost, model, timestamp) fed to HAIEC AI Inventory"],"limitations":["Instrumentation only — does not scan code or verify security","Not a security scanner — does not detect vulnerabilities","Requires HAIEC AI Inventory for data aggregation and reporting"],"installCommand":"npm install @haiec/anthropic","releaseDate":"2026-01-28","lastVerifiedDate":"2026-08-22","license":"MIT","status":"released","roadmapItems":[]},{"slug":"isaf","canonicalName":"ISAF Logger","packageName":"isaf-logger","version":"0.2.0","registry":"pypi","productLayer":"evidence","category":"evidence-generation","shortDescription":"Instruction Stack Audit Framework — automatic lineage logging for AI training pipelines.","longDescription":"Add 3 lines of code to get cryptographic lineage evidence for AI training pipelines. Logs Layers 6-9 (Framework, Data, Objectives, Deployment/Inference) with SHA-256 hash chains. Generates evidence that can support compliance documentation. ISAF does not certify compliance.","canonicalUrl":"/isaf","githubUrl":"https://github.com/haiec/isaf-logger","pypiUrl":"https://pypi.org/project/isaf-logger/","supportedLanguages":["Python 3.8+"],"supportedFrameworks":["PyTorch","TensorFlow","JAX","scikit-learn"],"executionModel":"Python decorators that intercept training, data loading, objective, and inference functions. Logs to SQLite (local), MLflow (production), or memory (testing). SHA-256 hash chains for tamper-evidence.","evidenceOutputs":["Lineage report (JSON) with Layers 6-9 metadata","SHA-256 hash chains for tamper-evident audit trail","Compliance mapping references (EU AI Act Art 10/11, NIST AI RMF, ISO 42001, Colorado AI Act)","CLI tools: inspect, verify, export-from-db, list-sessions"],"limitations":["Evidence generation utility — not a security scanner","Does not validate model behavior, runtime safety, or regulatory compliance status","Logs lineage metadata only — does not execute or verify the training process","Compliance mappings are references, not certification","Does not replace human review or formal audit"],"installCommand":"pip install isaf-logger","cliCommand":"isaf","releaseDate":"2026-01-15","lastVerifiedDate":"2026-08-22","changelogUrl":"https://github.com/haiec/isaf-logger/releases","license":"MIT","status":"beta","roadmapItems":[]}]}