AI Agent Vulnerability Scanning AI Agents

Tools and platforms for detecting, auditing, and testing security vulnerabilities in AI agents, MCP servers, and their configurations through static analysis, dynamic testing, and threat intelligence. Does NOT include general application security, smart contract auditing (unless agent-specific), or dependency vulnerability scanning.

There are 101 ai agent vulnerability scanning agents tracked. 6 score above 50 (established tier). The highest-rated is Nebulock-Inc/agentic-threat-hunting-framework at 59/100 with 205 stars.

Get all 101 projects as JSON

curl "https://pt-edge.onrender.com/api/v1/datasets/quality?domain=agents&subcategory=ai-agent-vulnerability-scanning&limit=20"

Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.

#	Agent	Score	Tier	Stars	Language
1	Nebulock-Inc/agentic-threat-hunting-framework ATHF is a framework for agentic threat hunting - building systems that can...	59	Established	205	Python
2	AgentSeal/agentseal Security toolkit for AI agents. Scan your machine for dangerous skills and...	57	Established	119	Python
3	cosai-oasis/secure-ai-tooling The CoSAI Risk Map is a framework for identifying, analyzing, and mitigating...	52	Established	65	Python
4	HeadyZhang/agent-audit Static security scanner for LLM agents — prompt injection, MCP config...	51	Established	104	Python
5	oasm-platform/open-asm Open-source platform for cybersecurity Attack Surface Management (OASM).	50	Established	79	TypeScript
6	LucidAkshay/kavach Tactical AI Workspace Monitor & EDR	50	Established	189	TypeScript
7	affaan-m/agentshield AI agent security scanner. Detect vulnerabilities in agent configurations,...	49	Emerging	99	TypeScript
8	PurpleAILAB/Vigilo An AI hacker for Web3 Smart Contract. for bug bounties, Audit contest,...	49	Emerging	10	TypeScript
9	AgentSecOps/SecOpsAgentKit Security operations toolkit for AI coding agents. Give Claude Code 25+...	45	Emerging	74	Open Policy Agent
10	Defend-AI-Tech-Inc/agent-discover-scanner Multi-layer AI agent detection: Static code analysis, network monitoring,...	44	Emerging	8	Python
11	gapilongo/SOC Intelligent SOC automation framework powered by LangGraph multi-agent...	41	Emerging	11	Python
12	angelnicolasc/drako AI agent security platform. Scan before you deploy. Block in runtime. No...	38	Emerging	4	Python
13	thebearwithabite/membranes 🛡️ The VirusTotal for prompt injection — open-source defense with...	38	Emerging	6	Python
14	opena2a-org/opena2a Open-source security tools for AI agents. Find vulnerabilities, fix root...	38	Emerging	7	TypeScript
15	ousher/tia-framework 🐍 TIA — Threat Intelligence Autonomy \| 26 AI agents detect threats in 12...	38	Emerging	5	HTML
16	aiconnai/agentshield Security scanner for AI agent extensions — offline-first, multi-framework,...	38	Emerging	6	Rust
17	sundew-sh/sundew A carnivorous honeypot for AI agents. Every deployment generates a unique...	38	Emerging	6	Python
18	mickmicksh/chub-supply-chain-poc Silent dependency injection through AI documentation pipelines. 240...	37	Emerging	4	Python
19	oasm-platform/oasm-assistant Smart assistant for threat monitoring, attack prevention, and web protection.	36	Emerging	18	Python
20	GH05TCREW/eidolon Network scanner that maps infrastructure into a Neo4j graph and executes...	36	Emerging	14	Python
21	math280h/safe-pkgs Package safety checks for AI agents before install via MCP	35	Emerging	6	Rust
22	Agent-Field/sec-af AI-native security auditor on AgentField that proves exploitability with...	35	Emerging	22	Python
23	NewmanXBT/sealevel-guard Agent-native Solana security infrastructure for pre-deployment,...	35	Emerging	1	JavaScript
24	roli-lpci/little-canary Sacrificial LLM instances as behavioral probes for prompt injection detection	34	Emerging	7	Python
25	n-WN/SubgroupX 正规子群.AI Agent \| SubgroupX: A high-performance AI Agent for offensive...	34	Emerging	321	JavaScript
26	Defenter-AI/defenter-proxy Real-time semantic security for AI coding agents and MCP tools.	34	Emerging	3	Python
27	proventra/proventra-core Secure your AI Agents against prompt injection attacks	33	Emerging	19	Python
28	ThirdKeyAI/agentsniff Detect AI agents operating on your network through passive monitoring,...	32	Emerging	2	Python
29	VolkanSah/AI-API-Security-Best-Practices The purpose of this document is to outline the security risks and...	31	Emerging	33	—
30	pantheraudits/web3-sec-ai-prompts AI prompts for web3 security researchers — bug bounties, private audits, and contests	31	Emerging	10	—
31	waris206/ThreatLens AI-Driven Malware Triage & Deep Swarm Inspection Platform	28	Experimental	3	JavaScript
32	spiffy-oss/artguard Open-source AI artifact scanner. Detect malicious agent skills, MCP servers,...	27	Experimental	24	—
33	scthornton/securecode-web Real-World Security Conversations for AI Training	27	Experimental	6	Python
34	VektorSecurity/ai-cybersecurity-homelab Welcome to my Cybersecurity Homelab, where I experiment with ethical...	27	Experimental	17	—
35	AIDEUSPRO/mandatory-behavioral-firewall 🛡️ AI Code Quality Control System for Cursor IDE - Prevents low-quality code...	26	Experimental	5	—
36	DebasishTripathy13/Project-Libra This project is completely linked to all cyber sec tool from me as a sec enthusiast.	26	Experimental	3	Python
37	Nomadu27/InsAIts Runtime security layer for multi-agent AI. 23 anomaly types. OWASP MCP Top...	26	Experimental	14	Python
38	peg/snare Honeypot canaries for AI agents. Detect compromised agents via fake...	25	Experimental	1	Go
39	SecurityLab-UCD/ai-agent-security [RAIE'25] This repository contains source code for the demos and attacks we...	25	Experimental	5	Python
40	blairmichaelg/secbrain Multi-agent AI security bounty system with DeFi exploit protection...	24	Experimental	1	Solidity
41	autralabs/agentshield AgentShield is a middleware implementation of Zero Shot Embedding Drift...	24	Experimental	4	Python
42	calus-ai/anticipator Anticipator is an open-source threat detection platform for multi-agent AI systems.	23	Experimental	2	Python
43	lahadiyani/secai-prototype-lite-version SECAI adalah kerangka kerja (framework) eksperimental yang...	23	Experimental	2	Python
44	brianleach/cyrusworker Run Cyrus (Claude Code-powered Linear agent) on Cloudflare's edge...	23	Experimental	2	TypeScript
45	luckyPipewrench/pipelock-rules Official community detection rules for Pipelock - the open-source agent firewall	23	Experimental	1	Shell
46	jitendar-singh/securitymind Security Mind: AI-Powered Application Security Posture Management (ASPM) Platform	23	Experimental	1	Python
47	Enzonogue/opena2a Manage and secure AI agents by scanning, protecting, benchmarking, and...	22	Experimental	—	TypeScript
48	Jadevil73/agentseal Detect vulnerabilities in AI agents by testing their security to prevent...	22	Experimental	—	Python
49	Deaxu/ArchGraph Security-first code intelligence for AI agents — taint analysis, CVE...	22	Experimental	—	Python
50	kogunlowo123/ai-agent-soc-triage AI-powered SOC alert triage agent with MITRE ATT&CK classification, severity...	22	Experimental	—	Python
51	Zorropiscina/artguard Scan AI artifacts like agent skills and config files for security risks,...	22	Experimental	—	—
52	maxwalser001-del/shieldpilot Open-source security platform for AI coding agents. 9 risk analyzers, 178+...	22	Experimental	—	Python
53	raghulvj01/aegis-mcp 🛡️ Open-source MCP server for AI-powered DevSecOps — cloud audits, CVE...	22	Experimental	—	Python
54	TheIbrahimMalik/vendiligence Vertical AI agent workflow for vendor due diligence and security...	22	Experimental	—	Python
55	vectimus/policies 78 Cedar policies and 369 rules governing AI coding agents. Every rule...	22	Experimental	—	JavaScript
56	Mkar9182/SCEP-AI Protect passwords with a fast, standalone HTML tool that runs locally, using...	22	Experimental	—	—
57	PowerHouse-Consulting-Group/cybersecurity-analyst-agent 🛡️ Autonomous AI Cybersecurity Log Analyst. An LLM-Agnostic SOC agent...	22	Experimental	—	Shell
58	fobi28/Secure-Agent-Launcher Block AI agent access to sensitive macOS paths and log all actions to...	22	Experimental	1	Python
59	jakyunknown/SCEP-AI SCEP AI is a open-sourced ai password entropy checker app that checks how...	22	Experimental	1	—
60	mark0011astra/Secure-Agent-Launcher Blocks risky AI CLI runs before they access secrets like ~/.ssh, ~/.aws, and...	22	Experimental	1	Python
61	chevyphillip/auggiesec-agent AI-powered security scanner that analyzes codebases for OWASP Top 10 2021...	22	Experimental	4	TypeScript
62	limaronaldo/agentshield Security scanner for AI agent extensions — offline-first, multi-framework,...	22	Experimental	4	Rust
63	chirayu999/infinity-veil Multi Agent system to hunt for cyber threats in an organisation's infrastructure	21	Experimental	—	TypeScript
64	JohnField07/AI-Bastion Protect autonomous AI agents on Linux with AI-Bastion’s 8-layer security...	21	Experimental	—	Shell
65	panguard-ai/panguard-ai Open-source security platform for AI agents -- audits skills before install,...	21	Experimental	—	TypeScript
66	elliotllliu/agent-shield 🛡️ Security scanner for AI agents, MCP servers & plugins — 30 rules, AST...	21	Experimental	—	TypeScript
67	vigilhq/vigil The compliance ops agent that never sleeps — watches regulatory feeds, maps...	21	Experimental	—	Python
68	stubbies/next-ai-shield The easiest way to protect your Next.js content from AI crawlers. Shield...	21	Experimental	—	TypeScript
69	SayedhDev/AI-Bastion-Guardian Protect Windows hosts running AI agents by enforcing firewall rules,...	21	Experimental	—	PowerShell
70	stlas/PromptShield Prompt Injection Firewall for AI agents. 113 detection patterns, 14 threat...	21	Experimental	—	Python
71	empowered-humanity/agent-security AI agent security scanner — 176 detection patterns with taint analysis,...	21	Experimental	—	TypeScript
72	speed785/sentinel-inject Prompt injection scanner middleware for AI agents — dual-layer rule-based +...	21	Experimental	—	Python
73	huyairobot/neox-agent-risk-lab Simulate AI agent attack scenarios to test governance, compliance, and...	21	Experimental	—	Python
74	Perkins-Fund/Cortex-Agent-Source Traceix Cortex Agents. Malware analysis for everyone	20	Experimental	1	Python
75	Nezar-Alhammadi/Vigil-AI Vigil-AI: An autonomous Web3 security auditor	20	Experimental	1	Python
76	GravityZenAI/AI-Bastion-Guardian Windows-side security for AI agents running in WSL2. Firewall rules, egress...	20	Experimental	1	PowerShell
77	andrewkolagit/DetectPack-Forge DetectPack Forge turns plain-English behaviors or sample logs into...	19	Experimental	24	TypeScript
78	ajmelian/HeaderGuard HeaderGuard (PHP 8.4) audita cabeceras de seguridad HTTP y hace quick check...	19	Experimental	2	PHP
79	Moraa1714/MSEP 🌌 Enhance digital intelligence with M.S.E.P., an AI-powered tool that deeply...	19	Experimental	1	Python
80	MRFrazer25/AI-OSINT-Security-Analyzer AI Cybersecurity intelligence gathering streamlit web app using Cohere's...	18	Experimental	1	Python
81	khushiiagrawal/Adaptive-Threat-Modeler Adaptive Threat Modeler is security analysis platform that continuously...	18	Experimental	1	TypeScript
82	brunosergi/tldr-threat-reports An AI-automated tool designed to help Threat Intelligence (CTI) Analysts...	17	Experimental	7	Python
83	montevive/prompt-injection-demo Prompt Injection Demo with n8n	16	Experimental	2	Python
84	uncensored-waterford179/mguard Protect AI agent memory from poisoning attacks with a zero-dependency shield...	15	Experimental	1	—
85	KONGMatta/sentinel-web3-audit-bot 🚀 Ultimate Web3 Security AI Bot 2026 – Free Autonomous Audit Toolkit for...	14	Experimental	—	—
86	SatishoBananamoto/vigil Predictive risk intelligence for open source dependencies	14	Experimental	—	Python
87	noobdna/tacomachi-agent AI agent "Tacomachi" for security, automation, and network intelligence	14	Experimental	—	Python
88	vishalbk/mvt-trilogy MVT Observatory — Macro Vulnerability Trilogy. AI-native FinTech risk...	14	Experimental	—	Python
89	MinSeok-log/cognitive-injection A new class of npm attack vector that bypasses all static security scanners...	14	Experimental	—	—
90	dryssboy/Tyleshancloud7 🔐 Explore hands-on cybersecurity projects focused on GRC, cloud security,...	13	Experimental	—	—
91	yasir23/vigil Autonomous threat intelligence agent for the terminal. Hunt threats,...	13	Experimental	—	—
92	Tyleshancloud7/Tyleshancloud7 About me	13	Experimental	—	JavaScript
93	eyalgerman/KubeSecAgent KubeSecAgent is an agent-based system for automated detection and...	13	Experimental	—	Python
94	patbi/AI_Security_Engineers_Roadmap AI_Security_Engineers_Roadmap	13	Experimental	—	Python
95	JadeGate/jadegate 💠 The security scanner for AI agents. 5-layer verification for MCP servers &...	13	Experimental	—	Python
96	cerberus-watch/cerberus-agents Cerberus MindStudio Agents for various security tasks	13	Experimental	—	—
97	abhinav8925/AI-Dependency-Risk-Analyzer AI-powered scanner detecting vulnerabilities, license issues, and...	13	Experimental	—	JavaScript
98	HelloNathan9999/permission-patrol 🛡️ Inspect Python scripts before execution to prevent hidden destructive...	13	Experimental	—	Python
99	KEPSOAR/DER-SecAgent DER-SecAgent: A Multi-Agent based Cybersecurity Framework for Distributed...	13	Experimental	2	Python
100	Caleb22187/agentshield Free browser-based prompt injection scanner for AI agents. 9 detection...	13	Experimental	—	JavaScript
101	Param-10/cybersec-ai-agent AI-powered cybersecurity assistant built on Cloudflare	11	Experimental	—	TypeScript

Comparisons in this category

agentseal and agentshield (57 vs 49) open-asm and oasm-assistant (50 vs 36)