AgentScout / By role / Security engineers

AI agents for security engineers (2026)

Pentest agents, guardrails, identity and sandboxing tools for securing apps and the agents that touch them. We picked the top tools for 5 jobs security engineers do every day: 26 tools in all, 24 of them free or with a free tier.

Jump to: Security testing · Agent security and guardrails · Smart contract security · Agent identity and logins · Sandboxes

Free tools from AgentScout for security engineers: Agent setup generator (guardrail rules in CLAUDE.md, AGENTS.md)

How we picked: each section takes the tools matched to that task in our directory, putting tools whose category and stated use cases fit the task first, then ordering by tracked GitHub stars. No paid placements.

Security testing

Agents that probe your app, code and smart contracts the way an attacker would: running penetration tests, red-teaming AI systems and flagging vulnerabilities with suggested fixes. All 16 tools →

Strix Open source + cloud
Open-source AI agents that run penetration tests on your app to find and help fix security vulnerabilities. · ★ 69,022
PentAGI Open source
Autonomous multi-agent system for running penetration testing tasks. · ★ 30,728
AI-Infra-Guard Open source
Tencent's AI red-teaming platform that scans agents, skills and MCP servers for risks. · ★ 6,887
Superagent Open source + cloud
SDK for AI agent safety that blocks prompt injections and unsafe tool calls, redacts PII and secrets, and runs red-team scenarios. · ★ 6,770
CyberStrike Open source
Terminal agent for authorized penetration testing that runs recon, vulnerability discovery and reporting with specialized security agents on your own LLM. · ★ 3,192
PentestAgent Open source
Agent framework for black-box security testing and bug bounty work. · ★ 3,188

Agent security and guardrails

Guardrails, policies and monitoring that keep agents from doing what they shouldn't. All 53 tools →

Strix Open source + cloud
Open-source AI agents that run penetration tests on your app to find and help fix security vulnerabilities. · ★ 69,022
LiteLLM Open source + cloud
Open-source AI gateway and Python SDK that calls 100+ LLM providers in the OpenAI format, with cost tracking, guardrails, load balancing and logging. · ★ 61,465
Kong Gateway Open source + cloud
Cloud-native API, LLM and MCP gateway that adds routing, auth, multi-LLM support, semantic security and MCP traffic analytics through plugins. · ★ 44,278
PentAGI Open source
Autonomous multi-agent system for running penetration testing tasks. · ★ 30,728
Casdoor Open source
Agent-first identity and access management with an MCP and agent gateway. · ★ 14,592
Portkey AI Gateway Freemium
Fast open-source AI gateway that routes requests to hundreds of LLMs through one API with fallbacks, load balancing and built-in guardrails. · ★ 13,214

Smart contract security

AI auditors and agents that review smart contracts for exploitable bugs before and after deployment, plus tools that help build and check Web3 code. All 7 tools →

OpenZeppelin MCP Open source
OpenZeppelin's official MCP servers that let agents generate secure smart contracts from audited OpenZeppelin libraries for Solidity, Cairo, Stellar and more. · ★ 30
Almanax See site
AI security engineer that finds vulnerabilities in applications and smart contracts and reviews pull requests; acquired by depthfirst (June 2026).
ChainGPT Freemium
Suite of crypto AI tools: chatbot, smart-contract generator and auditor.
De.Fi Scanner Freemium
Smart-contract and token scanner that flags honeypots, owner powers and other contract risks, with a credit-based API for apps and agents.
Nora See site
Deep-reasoning AI coding agent for building and securing Web3 apps and smart contracts.
Octane See site
Agentic security analysis that finds exploitable vulnerabilities in mission-critical code, including DeFi smart contracts.

Agent identity and logins

Identity, auth and credential tools that let agents sign in to apps, prove who they act for and use secrets without ever seeing the raw passwords or keys. All 22 tools →

Kong Gateway Open source + cloud
Cloud-native API, LLM and MCP gateway that adds routing, auth, multi-LLM support, semantic security and MCP traffic analytics through plugins. · ★ 44,278
Casdoor Open source
Agent-first identity and access management with an MCP and agent gateway. · ★ 14,592
Nango Freemium
Integration platform that connects products and AI agents to 1,000+ APIs with managed auth, syncs and tool calls. · ★ 12,807
Tyk Gateway Open source + cloud
Cloud-native API and AI gateway supporting REST, GraphQL, gRPC and MCP, with rate limiting, auth and analytics. · ★ 10,863
Bindu Open source
Identity, communication and payments layer that lets AI agents talk to and pay each other. · ★ 10,056
Agent Governance Toolkit Open source
Microsoft toolkit for policy enforcement, identity and sandboxing for AI agents. · ★ 6,435

Sandboxes

Sandboxes that let agents run code and tools in isolation, away from your machine and data. All 61 tools →

NVIDIA OpenShell Open source
Sandboxed runtime for autonomous agents with declarative YAML policies on file, network and credential access. · ★ 16,156
OpenSandbox Open source
Secure, fast sandbox runtime for AI agents to run code. · ★ 15,907
CubeSandbox Open source
Lightweight, concurrent sandbox for running AI agent code securely. · ★ 12,960
microsandbox Open source
Local-first microVM runtime for running untrusted agent code safely. · ★ 8,717
smolvm Open source
Portable, branchable virtual machine for running agents safely on your computer. · ★ 6,746
agentOS Open source + cloud
A lightweight operating system for agents from Rivet that runs coding agents and their tools inside fast WebAssembly sandboxes with a file system, processes and networking, so you can spin up thousands cheaply. · ★ 4,808