Security
AI agents for threat detection, access control, vulnerability scanning, and security policy enforcement. From SIEM integrations to agent-level sandboxing and governance layers, these tools protect AI systems and the applications they power. Increasingly essential as agentic workloads expand.
Kong AI Gateway
Governs and meters LLM and agent traffic through a high-performance API gateway, with an MCP gateway that turns existin…
NVIDIA SkillSpector
Scan agent skills, plugins, and MCP servers before installing them — detects prompt injection, data exfiltration, malic…
OpenCodeReview
Reviews pull requests with deterministic static analysis plus an LLM agent, posting line-level comments backed by rules…
Act Security
Enforce least-privilege access for humans, workloads, and AI agents in cloud environments — analyze effective IAM permi…
Agent Payment Safety Audit Desk
Human audit service for agent payment, x402, MCP, and wallet workflow safety. Reviews route discovery, 402 handling, se…
Agent Substrate
Runs agents in secure-by-default microVM sandboxes on GKE, delivering high sandbox density and sub-second resume throug…
Agent Vault
Open-source credential proxy for AI agents by Infisical. Agents call APIs without ever seeing secrets — credentials inj…
AgentOps for Apify Builders Bundle
Apify actor bundle for agent builders: normalize run traces for QA, control costs, and guard tool calls with a firewall…
Arcade.dev
Handles agent authorization, tool calling, and governance so agents act on behalf of users. MCP runtime with Python/JS…
Archestra
Run MCP servers for an enterprise behind one gateway — a curated registry, dynamic tool loading, prompt-injection guard…
Auth0 MCP
Lets agents manage an Auth0 tenant over a local MCP server, creating applications, APIs, and Actions, reading logs, and…
BoxLite
Embeds hardware-isolated micro-VM sandboxes that run any OCI image with persistent state, via Python, Node, Go, and Rus…
Catena Labs
Gives AI agents regulated financial identity, custody, and payment rails across fiat and stablecoins, built on the open…
Clawvisor
Human-in-the-loop security gateway for AI agents. Approves, verifies, and audits every API call across Gmail, GitHub, S…
CrowdStrike Charlotte AI
Generative AI security analyst that investigates threats, provides attack summaries, and recommends remediation across…
CubeSandbox
Runs self-hosted, KVM-isolated sandboxes for agent code execution behind an E2B-compatible API, with snapshots, cloning…
Descope
Drag-and-drop authentication platform with visual workflow builder for auth flows, MFA, and user management.
Docker Sandboxes
Disposable, isolated container sandboxes for running untrusted agent-generated code, with filesystem and network isolat…
Ghidra MCP
Connects AI to Ghidra for AI-assisted reverse engineering — 110 tools for decompilation, function analysis, disassembly…
HexStrike AI
Drive 150+ offensive security tools from an AI agent through one MCP server — reconnaissance, vulnerability scanning, e…
IBM ContextForge
Runs a self-hosted gateway and registry that federates MCP servers, A2A agents, and REST/gRPC APIs behind one endpoint…
IDA Pro MCP
Bridges IDA Pro to LLM clients over MCP, exposing decompilation, disassembly, cross-references, type and stack edits, m…
IronClaw
Runs a self-hosted, security-focused personal assistant in Rust with WASM-sandboxed tools, routines, persistent memory,…
Microsoft Execution Containers (MXC)
Runs untrusted model output, plugins, and tools in policy-driven sandboxes on Windows, Linux, and macOS through Rust, .…
NeMo Guardrails
Adds programmable guardrails to LLM apps — input/output moderation, jailbreak and prompt-injection detection, topic con…
Nightcrawler
Local AI pentesting agent that runs reconnaissance and vulnerability probing from your own hardware without sending sco…
NVIDIA NemoClaw
Open-source security runtime for multi-agent AI. Enforces policy-based access control, sandboxes kernel interactions, a…
NVIDIA OpenShell
Runs autonomous agents in isolated sandboxes with kernel-level policy enforcement over files, syscalls, and network, in…
OneCLI
Stores API keys in a central gateway and injects them into outbound requests at call time, so AI agents can use credent…
Onyx Security
Inspect and block agent activity inline — a control plane that inspects prompts, tool calls, and model responses across…
OpenSandbox
Runs AI-agent workloads in isolated Docker or Kubernetes sandboxes, exposing sandbox lifecycle, command, filesystem, an…
PentAGI
Executes penetration-testing workflows with autonomous agent teams that chain reconnaissance, exploitation, and reporti…
promptfoo
Tests and red-teams LLM apps, agents and RAG pipelines from declarative config, scanning for prompt injection, jailbrea…
REA (Reverse Engineer Anything)
Gives coding agents MCP and CLI reverse-engineering tools for native binaries, JavaScript and Electron apps, .NET assem…
SafeWeave
MCP server with 8 parallel security scanners — SAST, secrets, dependencies, IaC, container, DAST, license, and posture.…
Semgrep
Scans source code with AI-assisted SAST, SCA, and secrets detection, finding 8x more true positives with 50% less noise…
Shannon
Pentests web apps and APIs you are authorized to test by reading their source, running real exploits, and reporting onl…
Snyk
Developer security platform with AI-powered vulnerability detection, fix suggestions, and automated security testing ac…
Snyk Agent Scan
Security scanner for MCP servers and agent skills. Detects prompt injections, tool poisoning, and sensitive data risks…
Socket Security
Detects malicious and risky packages in npm, PyPI, and open-source dependencies before install using static analysis an…
Strands Box
Sandboxes agent programs with OS-level file, program, and network limits plus Dogwood policy rules enforced across shel…
Stytch
Authentication and identity platform with passwordless login, session management, and fraud detection APIs for modern a…
SWE-agent
Takes a GitHub issue and autonomously fixes it with the language model of your choice. Also runs cybersecurity/CTF task…
Tabnine
Code completion and chat assistant with self-hosted and air-gapped deployment options for teams with strict code-privac…
ToolHive
Runs MCP servers in isolated containers locally or on Kubernetes, with a CLI, desktop UI, operator, registry, and gatew…
Warden
AI code review agent from Sentry — define review skills in Markdown, run locally before pushing or auto-trigger on ever…
x64dbg MCP Server
Exposes full x64dbg debugger control to agents over HTTP as a native plugin — breakpoints, stepping, memory reads, and…