Agent Security Indexbeta
Independent · Vendor-neutral · Lab-tested

Find the right tool to secure your AI agents.

78 guardrails, MCP gateways, red-team tools, agent identity and audit platforms. Every listing is checked against the vendor's own site, and no vendor wrote its own ranking.

78 tools6 categories34 open source19 acquired or parent-ownedverified 2026-10-17

Browse by category

All tools

Lakera Guard

Lab: pending

Real-time API that screens LLM inputs and outputs for prompt injection, data leakage and policy violations.

CommercialAcquired / parentPrompt-injection firewalls & guardrails

Prompt Security

Lab: pending

Security platform for employee and homegrown GenAI use: prompt protection, data leak prevention and AI usage visibility.

CommercialAcquired / parentPrompt-injection firewalls & guardrails

NeMo Guardrails

Lab: pending

Open-source toolkit for adding programmable guardrails (topic, safety, jailbreak rails) to LLM apps.

Open sourcePrompt-injection firewalls & guardrails

Guardrails AI

Lab: pending

Open-source framework and validator hub for checking and correcting LLM inputs and outputs.

Open source + commercialPrompt-injection firewalls & guardrails

PurpleLlama (Llama Guard, Prompt Guard, LlamaFirewall)

Lab: pending

Meta's set of open tools to assess and improve LLM security, including Llama Guard classifiers and LlamaFirewall.

Open sourcePrompt-injection firewalls & guardrails

LLM Guard

Lab: pending

Security toolkit of input/output scanners for LLM interactions. Repository is archived (read-only).

Open sourceAcquired / parentPrompt-injection firewalls & guardrails

Azure AI Content Safety Prompt Shields

Lab: pending

Azure service that detects user prompt attacks and indirect (document) prompt injection.

Cloud servicePrompt-injection firewalls & guardrails

Amazon Bedrock Guardrails

Lab: pending

Configurable safeguards for Bedrock and other models: content filters, denied topics, PII redaction and prompt-attack detection.

Cloud servicePrompt-injection firewalls & guardrails

Google Cloud Model Armor

Lab: pending

Google Cloud service that screens prompts and responses for prompt injection, sensitive data leaks and harmful content.

Cloud servicePrompt-injection firewalls & guardrails

Cloudflare AI Security for Apps (Firewall for AI)

Lab: pending

WAF detection that flags prompt injection, PII and unsafe topics in AI application traffic at Cloudflare's edge.

Cloud servicePrompt-injection firewalls & guardrails

Akamai Firewall for AI

Lab: pending

Edge or API-deployed LLM firewall that blocks prompt injection, jailbreaks, toxic output and data exfiltration.

CommercialPrompt-injection firewalls & guardrails

Pangea AI Guard

Lab: pending

API services for securing AI apps, including prompt-layer guardrails and data redaction.

CommercialAcquired / parentPrompt-injection firewalls & guardrails

F5 AI Guardrails (formerly CalypsoAI)

Lab: pending

Runtime guardrails for generative AI apps; calypsoai.com now redirects here.

CommercialAcquired / parentPrompt-injection firewalls & guardrails

NeuralTrust

Lab: pending

AI gateway and guardrails that protect agents and apps from attacks, hallucinations and data leaks.

CommercialPrompt-injection firewalls & guardrails

Lasso Security

Lab: pending

AI security platform for visibility, control and protection across AI models, agents and apps.

CommercialPrompt-injection firewalls & guardrails

Vigil

Lab: pending

Python library and API that scans LLM inputs for prompt injection and jailbreaks. Last code push Jan 2024.

Open sourcePrompt-injection firewalls & guardrails

Pillar Security

Lab: pending

Platform to discover, govern and secure every AI agent and workflow across an organization.

CommercialAgent runtime security & posture

Prisma AIRS

Lab: pending

Palo Alto Networks' AI security platform to discover, assess and protect AI apps, models, agents and data.

CommercialAcquired / parentAgent runtime security & posture

Cisco AI Defense

Lab: pending

Discovers AI assets, red teams models and enforces runtime guardrails from the network layer.

CommercialAgent runtime security & posture

HiddenLayer

Lab: pending

End-to-end AI security platform that detects threats against models and agents at runtime.

CommercialAgent runtime security & posture

Zenity

Lab: pending

Evaluates every AI agent action in real time to control what agents can and cannot do.

CommercialAgent runtime security & posture

Noma Security

Lab: pending

Agent security and governance platform for enterprise security teams.

CommercialAgent runtime security & posture

Operant AI

Lab: pending

Real-time discovery, detection and defense for AI apps, agents and MCP.

CommercialAgent runtime security & posture

Straiker

Lab: pending

Detects prompt injection, tool misuse and runtime attacks across agentic AI apps.

CommercialAgent runtime security & posture

Wiz AI-SPM

Lab: pending

AI security posture management: visibility and risk reduction across models, training data and AI services in the cloud.

CommercialAcquired / parentAgent runtime security & posture

Knostic

Lab: pending

Secures AI coding agents (Claude Code, MCP servers, skills, IDE extensions) used inside a company.

CommercialAgent runtime security & posture

WitnessAI

Lab: pending

AI security and governance with network visibility, intent-based controls and runtime protection.

CommercialAgent runtime security & posture

Snyk Agent Scan (formerly mcp-scan)

Lab: pending

Scanner for AI agents, MCP servers and agent skills; originated as Invariant Labs' mcp-scan.

Open sourceAcquired / parentMCP gateways & scanners

Docker MCP Gateway

Lab: pending

Docker CLI plugin and gateway for running and managing containerized MCP servers.

Open sourceMCP gateways & scanners

Microsoft MCP Gateway

Lab: pending

Reverse proxy and management layer for MCP servers with session-aware routing on Kubernetes.

Open sourceMCP gateways & scanners

ContextForge MCP Gateway

Lab: pending

Gateway, registry and proxy in front of MCP, A2A and REST/gRPC APIs with guardrails and central discovery.

Open sourceMCP gateways & scanners

Lasso MCP Gateway

Lab: pending

Plugin-based gateway that orchestrates other MCP servers with security plugins.

Open sourceMCP gateways & scanners

Lunar.dev MCPX

Lab: pending

Enterprise AI control plane for MCP, LLM and API governance with observability.

CommercialAcquired / parentMCP gateways & scanners

Obot MCP Gateway

Lab: pending

Enterprise AI control plane with an MCP gateway for deploying and governing agents.

Open source + commercialMCP gateways & scanners

Kong AI Gateway

Lab: pending

AI gateway adding security, routing, observability and cost control for LLM and MCP traffic.

Open source + commercialMCP gateways & scanners

agentgateway

Lab: pending

Open-source data plane for LLM, MCP, A2A and HTTP traffic.

Open sourceMCP gateways & scanners

Cisco MCP Scanner

Lab: pending

Scans MCP servers for potential threats and security findings.

Open sourceMCP gateways & scanners

MCP-Shield

Lab: pending

Security scanner for MCP servers. Last code push Apr 2025.

Open sourceMCP gateways & scanners

MintMCP

Lab: pending

Managed MCP gateway that gives teams governed access to models, MCP tools and context.

CommercialMCP gateways & scanners

Runlayer

Lab: pending

Platform for AI enablement, security and control over agents and MCP.

CommercialMCP gateways & scanners

Promptfoo

Lab: pending

Open-source CLI and platform for evals, red teaming and vulnerability scanning of LLM apps.

Open source + commercialAcquired / parentAI red teaming & evals

garak

Lab: pending

LLM vulnerability scanner that probes models for jailbreaks, injection, leakage and more.

Open sourceAI red teaming & evals

PyRIT

Lab: pending

Microsoft's Python Risk Identification Tool for red teaming generative AI systems.

Open sourceAI red teaming & evals

Giskard

Lab: pending

Continuous red teaming for AI agents, plus an open-source testing library.

Open source + commercialAI red teaming & evals

DeepTeam

Lab: pending

Open-source framework to red team LLMs and AI agents.

Open sourceAI red teaming & evals

Mindgard

Lab: pending

Discovers, assesses and red teams AI models, agents and applications.

CommercialAI red teaming & evals

SPLX

Lab: pending

AI security testing and red-teaming platform for AI assistants and agents.

CommercialAcquired / parentAI red teaming & evals

AgentDojo

Lab: pending

Research benchmark environment for evaluating prompt-injection attacks and defenses on LLM agents.

Open sourceAI red teaming & evals

Inspect

Lab: pending

Open-source framework for LLM and agent evaluations from the UK AI Security Institute.

Open sourceAI red teaming & evals

Adversa AI

Lab: pending

AI red teaming and protection, including monitoring of what coding agents do.

CommercialAI red teaming & evals

Gray Swan

Lab: pending

Security tools and red-teaming for LLMs from researchers behind major AI vulnerability work.

CommercialAI red teaming & evals

FuzzyAI

Lab: pending

Automated LLM fuzzing tool to find jailbreaks in LLM APIs.

Open sourceAI red teaming & evals

promptmap

Lab: pending

Prompt-injection scanner for custom LLM applications.

Open sourceAI red teaming & evals

Enkrypt AI

Lab: pending

Red teaming, guardrails and monitoring platform for AI security and safety.

CommercialAI red teaming & evals

Astrix Security

Lab: pending

Visibility and governance for AI agent and non-human identities. Site says standalone sales of new licenses have ended.

CommercialAcquired / parentAgent identity & authorization

Aembit

Lab: pending

Runtime IAM for AI agents and workloads that keeps downstream credentials out of agents.

CommercialAgent identity & authorization

Oasis Security

Lab: pending

Lifecycle management and security for non-human identities and AI agents.

CommercialAcquired / parentAgent identity & authorization

Auth0 for AI Agents

Lab: pending

Auth0 identity features for shipping AI agents securely, with user login and delegated access to APIs.

CommercialAgent identity & authorization

Descope

Lab: pending

Identity platform covering users, partners, AI agents and MCP servers.

CommercialAgent identity & authorization

Stytch

Lab: pending

Authentication and security APIs and SDKs for apps.

CommercialAcquired / parentAgent identity & authorization

Permit.io

Lab: pending

Fine-grained authorization as a service (RBAC, ABAC, ReBAC) for apps, APIs and AI agents.

CommercialAgent identity & authorization

Oso

Lab: pending

Monitoring, access controls and automated guardrails for running agents in production.

CommercialAcquired / parentAgent identity & authorization

Keycard

Lab: pending

Runtime authorization that gives each agent its own identity and scoped access to resources.

CommercialAgent identity & authorization

Clutch Security

Lab: pending

Visibility, governance and zero trust for non-human identities, AI agents and secrets.

CommercialAgent identity & authorization

Teleport

Lab: pending

Unified identity and access for humans, machines and AI agents across infrastructure.

Open source + commercialAgent identity & authorization

Arcade.dev

Lab: pending

Actions runtime that handles auth and governs every tool call an enterprise agent makes.

CommercialAgent identity & authorization

Cerbos

Lab: pending

Fine-grained, contextual authorization for apps and AI systems; open-source policy engine.

Open source + commercialAgent identity & authorization

Langfuse

Lab: pending

Open platform to trace, evaluate and improve AI agents using production data.

Open source + commercialAcquired / parentAgent audit & observability

Arize Phoenix

Lab: pending

Self-hostable tracing, evaluation and debugging for agents and LLM apps.

Open source + commercialAgent audit & observability

LangSmith

Lab: pending

Agent and LLM observability with tracing and real-time monitoring.

CommercialAgent audit & observability

Helicone

Lab: pending

Open-source LLM gateway with routing, logging and monitoring.

Open source + commercialAcquired / parentAgent audit & observability

W&B Weave

Lab: pending

Tracing and evaluation toolkit for LLM and agent applications.

Open source + commercialAcquired / parentAgent audit & observability

OpenLLMetry

Lab: pending

OpenTelemetry-based open-source instrumentation for GenAI and LLM apps.

Open sourceAgent audit & observability

AgentOps

Lab: pending

Tracing, debugging and replay for AI agents.

Open source + commercialAgent audit & observability

Datadog LLM Observability

Lab: pending

Tracing, evaluation and experimentation for AI agents inside Datadog.

CommercialAgent audit & observability

Galileo

Lab: pending

AI evaluation, observability and real-time guardrails for agents; now part of Splunk Observability.

CommercialAcquired / parentAgent audit & observability

Laminar

Lab: pending

Open-source platform to trace, evaluate and debug AI agents.

Open source + commercialAgent audit & observability

Opik

Lab: pending

Open-source AI observability to test, trace and monitor LLM apps and agents.

Open source + commercialAgent audit & observability