Find the right tool to secure your AI agents.
78 guardrails, MCP gateways, red-team tools, agent identity and audit platforms. Every listing is checked against the vendor's own site, and no vendor wrote its own ranking.
Browse by category
Prompt-injection firewalls & guardrails
Filters that sit in front of or around an LLM and block prompt injection, jailbreaks, data leaks and unsafe output.
MCP gateways & scanners
Gateways that control which MCP tools an agent can reach, and scanners that check MCP servers and agent skills for tool poisoning and other flaws.
Agent runtime security & posture
Platforms that discover AI agents across a company, watch what they do at runtime and enforce policy.
AI red teaming & evals
Tools and services that attack models and agents on purpose to find weaknesses before attackers do.
Agent identity & authorization
Identity, credential and permission systems that give agents their own scoped, auditable access.
Agent audit & observability
Tracing and logging platforms that record what agents did, step by step, for debugging and audit.
All tools
Lakera Guard
Lab: pendingReal-time API that screens LLM inputs and outputs for prompt injection, data leakage and policy violations.
Prompt Security
Lab: pendingSecurity platform for employee and homegrown GenAI use: prompt protection, data leak prevention and AI usage visibility.
NeMo Guardrails
Lab: pendingOpen-source toolkit for adding programmable guardrails (topic, safety, jailbreak rails) to LLM apps.
Guardrails AI
Lab: pendingOpen-source framework and validator hub for checking and correcting LLM inputs and outputs.
PurpleLlama (Llama Guard, Prompt Guard, LlamaFirewall)
Lab: pendingMeta's set of open tools to assess and improve LLM security, including Llama Guard classifiers and LlamaFirewall.
LLM Guard
Lab: pendingSecurity toolkit of input/output scanners for LLM interactions. Repository is archived (read-only).
Azure AI Content Safety Prompt Shields
Lab: pendingAzure service that detects user prompt attacks and indirect (document) prompt injection.
Amazon Bedrock Guardrails
Lab: pendingConfigurable safeguards for Bedrock and other models: content filters, denied topics, PII redaction and prompt-attack detection.
Google Cloud Model Armor
Lab: pendingGoogle Cloud service that screens prompts and responses for prompt injection, sensitive data leaks and harmful content.
Cloudflare AI Security for Apps (Firewall for AI)
Lab: pendingWAF detection that flags prompt injection, PII and unsafe topics in AI application traffic at Cloudflare's edge.
Akamai Firewall for AI
Lab: pendingEdge or API-deployed LLM firewall that blocks prompt injection, jailbreaks, toxic output and data exfiltration.
Pangea AI Guard
Lab: pendingAPI services for securing AI apps, including prompt-layer guardrails and data redaction.
F5 AI Guardrails (formerly CalypsoAI)
Lab: pendingRuntime guardrails for generative AI apps; calypsoai.com now redirects here.
NeuralTrust
Lab: pendingAI gateway and guardrails that protect agents and apps from attacks, hallucinations and data leaks.
Lasso Security
Lab: pendingAI security platform for visibility, control and protection across AI models, agents and apps.
Vigil
Lab: pendingPython library and API that scans LLM inputs for prompt injection and jailbreaks. Last code push Jan 2024.
Pillar Security
Lab: pendingPlatform to discover, govern and secure every AI agent and workflow across an organization.
Prisma AIRS
Lab: pendingPalo Alto Networks' AI security platform to discover, assess and protect AI apps, models, agents and data.
Cisco AI Defense
Lab: pendingDiscovers AI assets, red teams models and enforces runtime guardrails from the network layer.
HiddenLayer
Lab: pendingEnd-to-end AI security platform that detects threats against models and agents at runtime.
Zenity
Lab: pendingEvaluates every AI agent action in real time to control what agents can and cannot do.
Noma Security
Lab: pendingAgent security and governance platform for enterprise security teams.
Operant AI
Lab: pendingReal-time discovery, detection and defense for AI apps, agents and MCP.
Straiker
Lab: pendingDetects prompt injection, tool misuse and runtime attacks across agentic AI apps.
Wiz AI-SPM
Lab: pendingAI security posture management: visibility and risk reduction across models, training data and AI services in the cloud.
Knostic
Lab: pendingSecures AI coding agents (Claude Code, MCP servers, skills, IDE extensions) used inside a company.
WitnessAI
Lab: pendingAI security and governance with network visibility, intent-based controls and runtime protection.
Snyk Agent Scan (formerly mcp-scan)
Lab: pendingScanner for AI agents, MCP servers and agent skills; originated as Invariant Labs' mcp-scan.
Docker MCP Gateway
Lab: pendingDocker CLI plugin and gateway for running and managing containerized MCP servers.
Microsoft MCP Gateway
Lab: pendingReverse proxy and management layer for MCP servers with session-aware routing on Kubernetes.
ContextForge MCP Gateway
Lab: pendingGateway, registry and proxy in front of MCP, A2A and REST/gRPC APIs with guardrails and central discovery.
Lasso MCP Gateway
Lab: pendingPlugin-based gateway that orchestrates other MCP servers with security plugins.
Lunar.dev MCPX
Lab: pendingEnterprise AI control plane for MCP, LLM and API governance with observability.
Obot MCP Gateway
Lab: pendingEnterprise AI control plane with an MCP gateway for deploying and governing agents.
Kong AI Gateway
Lab: pendingAI gateway adding security, routing, observability and cost control for LLM and MCP traffic.
agentgateway
Lab: pendingOpen-source data plane for LLM, MCP, A2A and HTTP traffic.
Cisco MCP Scanner
Lab: pendingScans MCP servers for potential threats and security findings.
MCP-Shield
Lab: pendingSecurity scanner for MCP servers. Last code push Apr 2025.
MintMCP
Lab: pendingManaged MCP gateway that gives teams governed access to models, MCP tools and context.
Runlayer
Lab: pendingPlatform for AI enablement, security and control over agents and MCP.
Promptfoo
Lab: pendingOpen-source CLI and platform for evals, red teaming and vulnerability scanning of LLM apps.
garak
Lab: pendingLLM vulnerability scanner that probes models for jailbreaks, injection, leakage and more.
PyRIT
Lab: pendingMicrosoft's Python Risk Identification Tool for red teaming generative AI systems.
Giskard
Lab: pendingContinuous red teaming for AI agents, plus an open-source testing library.
DeepTeam
Lab: pendingOpen-source framework to red team LLMs and AI agents.
Mindgard
Lab: pendingDiscovers, assesses and red teams AI models, agents and applications.
SPLX
Lab: pendingAI security testing and red-teaming platform for AI assistants and agents.
AgentDojo
Lab: pendingResearch benchmark environment for evaluating prompt-injection attacks and defenses on LLM agents.
Inspect
Lab: pendingOpen-source framework for LLM and agent evaluations from the UK AI Security Institute.
Adversa AI
Lab: pendingAI red teaming and protection, including monitoring of what coding agents do.
Gray Swan
Lab: pendingSecurity tools and red-teaming for LLMs from researchers behind major AI vulnerability work.
FuzzyAI
Lab: pendingAutomated LLM fuzzing tool to find jailbreaks in LLM APIs.
promptmap
Lab: pendingPrompt-injection scanner for custom LLM applications.
Enkrypt AI
Lab: pendingRed teaming, guardrails and monitoring platform for AI security and safety.
Astrix Security
Lab: pendingVisibility and governance for AI agent and non-human identities. Site says standalone sales of new licenses have ended.
Aembit
Lab: pendingRuntime IAM for AI agents and workloads that keeps downstream credentials out of agents.
Oasis Security
Lab: pendingLifecycle management and security for non-human identities and AI agents.
Auth0 for AI Agents
Lab: pendingAuth0 identity features for shipping AI agents securely, with user login and delegated access to APIs.
Descope
Lab: pendingIdentity platform covering users, partners, AI agents and MCP servers.
Stytch
Lab: pendingAuthentication and security APIs and SDKs for apps.
Permit.io
Lab: pendingFine-grained authorization as a service (RBAC, ABAC, ReBAC) for apps, APIs and AI agents.
Oso
Lab: pendingMonitoring, access controls and automated guardrails for running agents in production.
Keycard
Lab: pendingRuntime authorization that gives each agent its own identity and scoped access to resources.
Clutch Security
Lab: pendingVisibility, governance and zero trust for non-human identities, AI agents and secrets.
Teleport
Lab: pendingUnified identity and access for humans, machines and AI agents across infrastructure.
Arcade.dev
Lab: pendingActions runtime that handles auth and governs every tool call an enterprise agent makes.
Cerbos
Lab: pendingFine-grained, contextual authorization for apps and AI systems; open-source policy engine.
Langfuse
Lab: pendingOpen platform to trace, evaluate and improve AI agents using production data.
Arize Phoenix
Lab: pendingSelf-hostable tracing, evaluation and debugging for agents and LLM apps.
LangSmith
Lab: pendingAgent and LLM observability with tracing and real-time monitoring.
Helicone
Lab: pendingOpen-source LLM gateway with routing, logging and monitoring.
W&B Weave
Lab: pendingTracing and evaluation toolkit for LLM and agent applications.
OpenLLMetry
Lab: pendingOpenTelemetry-based open-source instrumentation for GenAI and LLM apps.
AgentOps
Lab: pendingTracing, debugging and replay for AI agents.
Datadog LLM Observability
Lab: pendingTracing, evaluation and experimentation for AI agents inside Datadog.
Galileo
Lab: pendingAI evaluation, observability and real-time guardrails for agents; now part of Splunk Observability.
Laminar
Lab: pendingOpen-source platform to trace, evaluate and debug AI agents.
Opik
Lab: pendingOpen-source AI observability to test, trace and monitor LLM apps and agents.