Security & governance AI agent tools

Wren Pre-sign Check

Newsecurity & governancePaid

Wren Pre-sign Check is a pay-per-call x402 API that an AI agent calls before it signs anything with its wallet. Send a transaction (to + data), an EIP-712 typed-data payload or untrusted text, and it returns block, review or allow, the decoded call in plain words and every finding: unlimited approvals, Permit and Permit2 signatures, setApprovalForAll, EIP-7702 delegation, contract deployment and injected instructions. With an optional wren-guard policy (allowlist, spenders, caps) it also blocks unknown recipients, over-cap amounts and lookalike addresses. It is a static check and stores nothing you send; free demos show real output.

Added Oct 21, 2026

OpenAPPA

Newsecurity & governanceOpen source

OpenAPPA is a deterministic guardrail that sits between an AI agent and its tools and tracks how data flows across tool calls, instead of asking a second model to judge each call. Policies decide whether untrusted or sensitive data may reach a given action, which blocks data exfiltration caused by prompt injection or hallucination while letting agents finish their tasks. It plugs into Claude Code, Pi, OpenCode, kAgent and Archestra, comes with reusable policy "batteries", validation, observability and reporting, and is backed by a NeurIPS workshop paper with published benchmarks. It is in preview as an open RFC.

Added Oct 21, 2026

Halofy

Newsecurity & governanceFreemium

Halofy is an access and governance layer for a team's AI agents, giving every agent organizational context through one identity and policy model with provenance and audit, alongside a desktop AI workstation that turns power users' agent practices into shared policies.

Added Oct 20, 2026

HOL Guard

Newsecurity & governanceOpen source + cloud

HOL Guard is a free, open-source (Apache-2.0), local-first security layer for AI coding agents such as Claude Code, Codex, Cursor and GitHub Copilot CLI. On supported integrations it checks risky shell commands, reads of secret-bearing files, package installs and new or changed MCP tools before they run, lets you allow, ask or block each action, and keeps a local record for review. It installs with pipx (hol-guard) and works offline; optional Guard Cloud adds synced approvals, team policy and dashboards.

Added Oct 20, 2026

Phase

Newsecurity & governanceOpen source + cloud

An open-source secrets manager that syncs API keys and environment variables to apps, CI and agents with end-to-end encryption and access control. Free tier, Pro from $10 per user a month, or self-host.

Added Oct 20, 2026

ThinkWatch Lite

Newsecurity & governanceOpen source

A local gateway that sits between your coding agents and model providers, letting you switch upstreams, redact secrets before they leave your machine, block dangerous tool calls and see the cost of each request.

Added Oct 20, 2026

Eleven

Newsecurity & governanceOpen source

An agent-first reverse-engineering app for macOS, Windows and Linux: load any app or binary and ask your AI agent what it does while it disassembles and analyzes the code for you.

Added Oct 20, 2026

open-kritt

Newsecurity & governanceOpen source + cloud

A self-hosted AI security research tool that orchestrates agents to hunt for vulnerabilities in a codebase and then validate and rank what they find; managed scans are also offered.

Added Oct 20, 2026

wren-guard Pro

Newsecurity & governancePaid

wren-guard Pro is a TypeScript guard library for AI agents that hold or move funds on Base and other EVM chains (viem, CDP AgentKit, Privy, Eliza and similar stacks). It enforces allowlisted, capped and simulated sends, decodes calldata and signatures to flag unlimited approvals, Permit, Permit2, setApprovalForAll and EIP-7702 delegation, screens for injected instructions and watches nonces. It ships with an 89-scenario attack corpus drawn from public agent wallet incidents and a GitHub Action that fails CI if your agent's policy would let a known attack through. The original Python wren-guard is free and MIT licensed.

Added Oct 20, 2026

Pragor

Newsecurity & governanceFree

Coordination and governance layer for teams of people and AI agents, not an autonomous agent: a shared board with tasks, directed messages, approvals, files and an attributable activity record, where agents connect over REST or project MCP access.

Added Oct 19, 2026

Infisical

Newsecurity & governanceOpen source + cloud

Open-source platform for managing secrets, certificates and privileged access, including scoped credentials for AI agents.

Added Oct 19, 2026

CyberStrike

Newsecurity & governanceOpen source

Terminal agent for authorized penetration testing that runs recon, vulnerability discovery and reporting with specialized security agents on your own LLM.

Added Oct 19, 2026

Is My Agent Safe

Newsecurity & governanceFreemium

Is My Agent Safe checks your OpenClaw version and security audit output in plain English, showing which published security fixes you are missing and which breaking changes lie before the latest release; free check, full report $29 one-off.

Added Oct 19, 2026

Mantis

Newsecurity & governanceOpen source

Google's toolkit for AI coding agents to autonomously find, reproduce and patch software vulnerabilities in isolated environments.

Added Oct 18, 2026

Agent Vault

Newsecurity & governanceOpen source

Infisical's open-source credential broker that proxies API calls for AI agents so they never hold secrets themselves.

Added Oct 18, 2026

ADR

Newsecurity & governanceOpen source

Uber's Agentic AI Detection and Response system that secures employee and customer-facing AI agents with observability and threat detection.

Added Oct 18, 2026

Superagent

Newsecurity & governanceOpen source + cloud

SDK for AI agent safety that blocks prompt injections and unsafe tool calls, redacts PII and secrets, and runs red-team scenarios.

Added Oct 18, 2026

Delve

Newsecurity & governanceSee site

Compliance automation that uses AI agents to handle SOC 2, HIPAA and GDPR busywork.

Added Oct 18, 2026

Sonatype MCP

Newsecurity & governanceFreemium

Sonatype's dependency-management MCP server that gives coding agents component versions, security analysis and Trust Score recommendations.

Added Oct 18, 2026

Cisco MCP Scanner

Newsecurity & governanceOpen source

Cisco's open-source scanner that checks MCP servers and tools for malicious or risky behaviour using YARA rules and LLM analysis.

Added Oct 18, 2026

Dropzone AI

security & governanceEnterprise

AI SOC analyst agents that investigate security alerts autonomously.

Added Oct 16, 2026

Guardrails AI

security & governanceOpen source + cloud

Open-source framework for validating LLM inputs and outputs with configurable guardrails.

Added Oct 16, 2026

Mindflow

security & governanceEnterprise

No-code automation and AI agents for security and IT operations.

Added Oct 16, 2026

Zenity

security & governanceEnterprise

Security and governance for AI agents across enterprise platforms.

Added Oct 16, 2026

Simbian

security & governanceEnterprise

AI agents for security operations, threat hunting and response.

Added Oct 16, 2026

Prophet Security

security & governanceEnterprise

Agentic AI SOC analyst that triages and investigates alerts.

Added Oct 16, 2026

Token Security

security & governanceEnterprise

Security for non-human and AI agent identities.

Added Oct 16, 2026

Strix

security & governanceOpen source + cloud

Open-source AI agents that run penetration tests on your app to find and help fix security vulnerabilities.

Added Oct 16, 2026

PentAGI

security & governanceOpen source

Autonomous multi-agent system for running penetration testing tasks.

Added Oct 16, 2026

AI-Infra-Guard

security & governanceOpen source

Tencent's AI red-teaming platform that scans agents, skills and MCP servers for risks.

Added Oct 16, 2026

Agent Governance Toolkit

security & governanceOpen source

Microsoft toolkit for policy enforcement, identity and sandboxing for AI agents.

Added Oct 16, 2026

Failproof AI

security & governanceOpen source

Observability and policy enforcement for AI agent harnesses.

Added Oct 16, 2026

Tracecat

security & governanceOpen source + cloud

Open-source security automation platform for teams and AI agents.

Added Oct 16, 2026

PentestAgent

security & governanceOpen source

Agent framework for black-box security testing and bug bounty work.

Added Oct 16, 2026

Snyk Agent Scan

security & governanceOpen source

Snyk's scanner for security risks in MCP servers and agent skills.

Added Oct 16, 2026

Almanax

security & governanceSee site

AI security engineer that finds vulnerabilities in applications and smart contracts and reviews pull requests; acquired by depthfirst (June 2026).

Added Oct 16, 2026

Octane

security & governanceSee site

Agentic security analysis that finds exploitable vulnerabilities in mission-critical code, including DeFi smart contracts.

Added Oct 16, 2026