Best AI agents for security testing (2026)

open-kritt

Newsecurity & governanceOpen source + cloud

A self-hosted AI security research tool that orchestrates agents to hunt for vulnerabilities in a codebase and then validate and rank what they find; managed scans are also offered.

Added Oct 20, 2026

AI Beat

Newevals & observabilityOpen source

An open-source AI red-teaming suite: PromptBeat attacks models and prompts, and AgentBeat runs black-box security evaluations against HTTP-exposed agents.

Added Oct 20, 2026

CyberStrike

Newsecurity & governanceOpen source

Terminal agent for authorized penetration testing that runs recon, vulnerability discovery and reporting with specialized security agents on your own LLM.

Added Oct 19, 2026

Rogue

Newevals & observabilityOpen source

Agent evaluator and red-team tool that probes your agent with test conversations and attacks and reports pass or fail against your policies.

Added Oct 19, 2026

Is My Agent Safe

Newsecurity & governanceFreemium

Is My Agent Safe checks your OpenClaw version and security audit output in plain English, showing which published security fixes you are missing and which breaking changes lie before the latest release; free check, full report $29 one-off.

Added Oct 19, 2026

Superagent

Newsecurity & governanceOpen source + cloud

SDK for AI agent safety that blocks prompt injections and unsafe tool calls, redacts PII and secrets, and runs red-team scenarios.

Added Oct 18, 2026

Mantis

Newsecurity & governanceOpen source

Google's toolkit for AI coding agents to autonomously find, reproduce and patch software vulnerabilities in isolated environments.

Added Oct 18, 2026

Sonatype MCP

Newsecurity & governanceFreemium

Sonatype's dependency-management MCP server that gives coding agents component versions, security analysis and Trust Score recommendations.

Added Oct 18, 2026

Strix

security & governanceOpen source + cloud

Open-source AI agents that run penetration tests on your app to find and help fix security vulnerabilities.

Added Oct 16, 2026

PentAGI

security & governanceOpen source

Autonomous multi-agent system for running penetration testing tasks.

Added Oct 16, 2026

AI-Infra-Guard

security & governanceOpen source

Tencent's AI red-teaming platform that scans agents, skills and MCP servers for risks.

Added Oct 16, 2026

PentestAgent

security & governanceOpen source

Agent framework for black-box security testing and bug bounty work.

Added Oct 16, 2026

SonarQube MCP Server

MCP serversSource-available + cloud

SonarQube MCP server for code quality and security analysis from agents.

Added Oct 16, 2026

Almanax

security & governanceSee site

AI security engineer that finds vulnerabilities in applications and smart contracts and reviews pull requests; acquired by depthfirst (June 2026).

Added Oct 16, 2026

Octane

security & governanceSee site

Agentic security analysis that finds exploitable vulnerabilities in mission-critical code, including DeFi smart contracts.

Added Oct 16, 2026

Sherlock AI

cryptoSee site

Sherlock's AI auditor for smart-contract vulnerabilities.

Added Oct 16, 2026