Best AI Agent Security & Governance Tools (2026)

Guardrails, policy engines, scanners and governance platforms for keeping AI agents safe, compliant and under control. Below are the top 20 of 22 matching tools in the AgentScout directory, ranked.

How we ranked: Ranked by GitHub stars as recorded on each AgentScout listing (link checks 2026-10-18). Tools without a tracked public repo come after, in alphabetical order. Stars measure developer popularity, not quality or fit for your job, so read each listing before you choose. No paid placements.

1. S

   1. Strix

   security & governanceOpen source + cloud★ 69,022 GitHub stars

   Open-source AI agents that run penetration tests on your app to find and help fix security vulnerabilities.

   Pricing (as stated): Open source + cloud · Mature

2. G

   2. Guardrails AI

   security & governanceOpen source + cloud★ 7,529 GitHub stars

   Open-source framework for validating LLM inputs and outputs with configurable guardrails.

   Pricing (as stated): Open source + cloud · Mature

3. A

   3. AI-Infra-Guard

   security & governanceOpen source★ 6,887 GitHub stars

   Tencent's AI red-teaming platform that scans agents, skills and MCP servers for risks.

   Pricing (as stated): Open source · Mature

4. S

   4. Superagent

   security & governanceOpen source★ 6,766 GitHub stars

   SDK for AI agent safety that blocks prompt injections and unsafe tool calls, redacts PII and secrets, and runs red-team scenarios.

   Pricing (as stated): Open source · Mature

5. A

   5. Agent Governance Toolkit

   security & governanceOpen source★ 6,435 GitHub stars

   Microsoft toolkit for policy enforcement, identity and sandboxing for AI agents.

   Pricing (as stated): Open source · Mature

6. F

   6. Failproof AI

   security & governanceOpen source★ 5,560 GitHub stars

   Observability and policy enforcement for AI agent harnesses.

   Pricing (as stated): Open source · Mature

7. T

   7. Tracecat

   security & governanceOpen source + cloud★ 3,835 GitHub stars

   Open-source security automation platform for teams and AI agents.

   Pricing (as stated): Open source + cloud · Active

8. P

   8. PentestAgent

   security & governanceOpen source★ 3,188 GitHub stars

   Agent framework for black-box security testing and bug bounty work.

   Pricing (as stated): Open source · Active

9. S

   9. Snyk Agent Scan

   security & governanceOpen source★ 3,142 GitHub stars

   Snyk's scanner for security risks in MCP servers and agent skills.

   Pricing (as stated): Open source · Active

10. M

    10. Mantis

    security & governanceOpen source★ 2,459 GitHub stars

    Google's toolkit for AI coding agents to autonomously find, reproduce and patch software vulnerabilities in isolated environments.

    Pricing (as stated): Open source · Active

11. A

    11. Agent Vault

    security & governanceOpen source★ 2,368 GitHub stars

    Infisical's open-source credential broker that proxies API calls for AI agents so they never hold secrets themselves.

    Pricing (as stated): Open source · Active

12. A

    12. Agent Safehouse

    security & governanceOpen source★ 2,110 GitHub stars

    macOS sandbox for local coding agents that limits file and integration access with deny-first policy profiles.

    Pricing (as stated): Open source · Active

13. A

    13. ADR

    security & governanceOpen source★ 2,064 GitHub stars

    Uber's Agentic AI Detection and Response system that secures employee and customer-facing AI agents with observability and threat detection.

    Pricing (as stated): Open source · Active

14. C

    14. Cisco MCP Scanner

    security & governanceOpen source★ 1,094 GitHub stars

    Cisco's open-source scanner that checks MCP servers and tools for malicious or risky behaviour using YARA rules and LLM analysis.

    Pricing (as stated): Open source · Active

15. D

    15. Delve

    security & governanceSee site

    Compliance automation that uses AI agents to handle SOC 2, HIPAA and GDPR busywork.

    Pricing (as stated): See site · Active

16. D

    16. Dropzone AI

    security & governanceEnterprise

    AI SOC analyst agents that investigate security alerts autonomously.

    Pricing (as stated): Enterprise · Active

17. M

    17. Mindflow

    security & governanceEnterprise

    No-code automation and AI agents for security and IT operations.

    Pricing (as stated): Enterprise · Active

18. P

    18. Prophet Security

    security & governanceEnterprise

    Agentic AI SOC analyst that triages and investigates alerts.

    Pricing (as stated): Enterprise · Active

19. S

    19. Simbian

    security & governanceEnterprise

    AI agents for security operations, threat hunting and response.

    Pricing (as stated): Enterprise · Active

20. S

    20. Sonatype MCP

    security & governanceSee site

    Sonatype's dependency-management MCP server that gives coding agents component versions, security analysis and Trust Score recommendations.

    Pricing (as stated): See site · Active

Browse by category

Related: Agent security and safety · Guardrails and policies · Free AI agent security tools

Related searches: Free AI agent security tools · AI security testing and pentest agents

More best-of lists: All best lists · Best AI Coding Agents · Best AI Agent Frameworks · Best AI Browser Agents · Best Open-Source MCP Servers · Most-Starred Open-Source AI Agent Projects · Best Self-Hosted AI Agents · Best Free AI Agents (Free Plans) · Best No-Code AI Agent Builders · Best AI Voice Agent Platforms · Best AI Vision Tools for Agents · Best AI Agent Observability & Eval Tools · Best Personal AI Agents · Best AI Agents for Business Teams · Best Crypto AI Agents · Best AI Productivity Agents · Best AI Agent Memory & RAG Tools · Best AI Sales & Marketing Agents · Best AI Customer Support Agents · Best Local AI Models & Runtimes

Facts come from our directory listings; pricing is as each maker states it and GitHub stars are as recorded on each listing. Check official sites before you choose.