Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

https://github.com/wellwelwel/lagune

🌊 Lagune is your security copilot as you build, your Blue Team when you audit, whether you're a developer or not (no API key needed).
https://github.com/wellwelwel/lagune

agent-skills ai ai-agents ai-driven blue-team claude-code codex copilot cursor-ai llm prd prompt-engineering prompt-toolkit sdd sdh security security-driven-hardening skills spec-driven spec-kit

Last synced: 1 day ago
JSON representation

🌊 Lagune is your security copilot as you build, your Blue Team when you audit, whether you're a developer or not (no API key needed).

Awesome Lists containing this project

README 

          



# 🌊 [Lagune AI](https://lagune.ai)



[![Secured By Lagune](https://img.shields.io/badge/Lagune-2f7bff?logo=springsecurity&logoColor=white&label=Secured%20By&labelColor=303952)](https://lagune.ai)

[![Version](https://img.shields.io/npm/v/lagune?label=&color=2f7bff&logo=npm&logoColor=white)](https://www.npmjs.com/package/lagune)

[![No API Key Needed](https://img.shields.io/badge/No%20API%20Key%20Needed-2f7bff?logo=claudecode&logoColor=white)](https://lagune.ai/docs/supported-agents)



**Lagune** helps your AI agent make a project more secure. You point it at your code, and the agent figures out what your system actually does, then guides you through the security work that matters for it.



- **Lagune** works with projects in **any programming language** and supports [**72 agents**](https://lagune.ai/docs/supported-agents) ✨



---



Love **Lagune**? [**Give us a ⭐ on GitHub**](https://github.com/wellwelwel/lagune)!



---



## Table of Contents



- 🌊 [**Get Started**](#get-started)

  - 📦 [**Dashboard**](#dashboard) | [**CLI**](#cli)

  - 💬 [**Slash Commands**](#slash-commands)

- 💽 [**Requirements**](#requirements)

- 🔐 [**Security**](#security)

- 🖖 [**Acknowledgements**](#acknowledgements)

- 🧑‍⚖️ [**License**](#license)



---



## Get Started



**Lagune** adapts to your environment, whether it is a new project or an existing one.



> [!TIP]

>

> See real-world [**Prompt Samples**](https://lagune.ai/docs/examples/prompts) 🪼



---



### Dashboard



For an interactive live view, follow-up, and maintenance, run:



```bash

npx -y lagune@latest

```



It serves a dashboard and opens it in a random port:



- [x] **Live Reload**

- [x] **Private** and **Local**

- [x] **Install**, **Pull**, **Update**, and **Manage** all **Lagune** features directly from your browser

- [x] No `node_modules` or `package.json` is needed 📦



> 

> 

> 

> 

> 

> 



> [!TIP]

>

> - 🚪 Use `--port` or `-p` to specify a custom port.

> - ⏏️ Press `Ctrl+C` to stop.



---



### CLI



#### › Install



```bash

npx -y lagune@latest init

```



- 🃏 **Lagune** runs on **Node.js** under the hood, you use whatever language you want.



#### › Update



To update **Lagune**'s own files and its commands to their latest versions, run:



```bash

npx -y lagune@latest update

```



> [!TIP]

>

> Your charter, the phase artifacts, and any custom specializations stay untouched.



#### › Pull



When you clone or fork a project that already has **Lagune**, run pull to install its files from the manifest:



```bash

npx -y lagune@latest pull

```



> [!TIP]

>

> 💡 Think of it as the **Lagune** equivalent of `npm i`, `pip install -r requirements.txt`, and the like.



---



### Slash Commands



Once **Lagune** is set up in your project, your **AI** agent unlocks a set of slash commands:



#### › Development flow



Harden the work as you build it, guided by the charter, with no flow to follow:



| Command                                               | What it does for you                                                      |

| ----------------------------------------------------- | ------------------------------------------------------------------------- |

| [**/lagune**](https://lagune.ai/docs/commands/lagune) | Enforces security along with your development, on any prompt, at any time |



- Pull in the on-demand specializations in real time while your agent works.

- Combine it with the [**/lagune.charter**](https://lagune.ai/docs/commands/charter) command to shape every build around your project's own security rules.



#### › The Blue Team flow



These five run in order. Each builds on the previous, so following the list top to bottom is all it takes:



| #   | Command                                                        | What it does for you                                                           |

| --- | -------------------------------------------------------------- | ------------------------------------------------------------------------------ |

| 1   | [**/lagune.charter**](https://lagune.ai/docs/commands/charter) | Sets your project's security rules, proposed for you or shaped by what you say |

| 2   | [**/lagune.detect**](https://lagune.ai/docs/commands/detect)   | Reads your code and maps what your system does and where the risks are         |

| 3   | [**/lagune.plan**](https://lagune.ai/docs/commands/plan)       | Turns what detect found into a defense plan, with a fix for each finding       |

| 4   | [**/lagune.harden**](https://lagune.ai/docs/commands/harden)   | Applies the plan's fixes to your code, safely and one at a time                |

| 5   | [**/lagune.verify**](https://lagune.ai/docs/commands/verify)   | Proves each applied fix holds and closes out the ones that do                  |



#### › Special commands



| Command                                                              | What it does                                                                            |

| -------------------------------------------------------------------- | --------------------------------------------------------------------------------------- |

| [**/lagune.specialize**](https://lagune.ai/docs/commands/specialize) | Specializes **Lagune** in a new security _sub_-skill from articles, exploits, or topics |

| [**/lagune.prove**](https://lagune.ai/docs/commands/prove)           | Turns each detected finding into a runnable proof for responsible disclosure            |



> [!TIP]

>

> Security is not a cost, it is an investment: what you put in upfront, you save many times over in the incidents you never have 🙋🏻‍♂️



> [!IMPORTANT]

>

> See the full [**documentation**](https://lagune.ai/) for usage examples and more.



---



## Requirements



You will need these tools installed on your system:



- [**Node.js (LTS)**](https://nodejs.org/en/download/package-manager)

- At least one of the [**Supported Agents**](https://lagune.ai/docs/supported-agents)



---



## Security



To details, report a vulnerability, and see the supported versions, see the [**Security Policy**](https://github.com/wellwelwel/lagune/blob/main/SECURITY.md).



---



## Contributing



🚧 Coming Soon.



---



## Acknowledgements



### Partners



Partners get an exclusive logo across the repositories and landing pages, plus a spot on a dedicated partners page.



> Help my work grow by [**becoming a partner**](https://lagune.ai/docs?partners) 🖖



### Supporters



Really thanks to everyone who has supported and keeps supporting my work.



[![Sponsors](https://wellwelwel.github.io/wellwelwel/sponsors.svg?v=1)](https://github.com/sponsors/wellwelwel)



> Support my work by [**becoming a sponsor**](https://github.com/sponsors/wellwelwel) too ✨



---



## License



**Lagune** is under the [**MIT License**](https://github.com/wellwelwel/lagune/blob/main/LICENSE).


Copyright © 2026-present [**Weslley Araújo**](https://github.com/wellwelwel) and [**contributors**](https://github.com/wellwelwel/lagune/graphs/contributors).



> [!IMPORTANT]

>

> ### Disclaimer

>

> All product names, trademarks, and registered trademarks mentioned are the property of their respective owners and are used for identification purposes only.