Security & governance AI agent tools
22 security & governance tools in the AgentScout directory, each with a link-checked listing. Tools that keep agents safe and accountable: guardrails, prompt-injection and MCP scanners, credential brokers, sandbox policies and AI security-operations agents.
There are 22 security & governance tools: 14 open source, 6 paid, usage-based or enterprise, 2 pricing on the maker's site.
Tasks in this category
Mantis
Google's toolkit for AI coding agents to autonomously find, reproduce and patch software vulnerabilities in isolated environments.
Added
Agent Vault
Infisical's open-source credential broker that proxies API calls for AI agents so they never hold secrets themselves.
Added
Agent Safehouse
macOS sandbox for local coding agents that limits file and integration access with deny-first policy profiles.
Added
ADR
Uber's Agentic AI Detection and Response system that secures employee and customer-facing AI agents with observability and threat detection.
Added
Superagent
SDK for AI agent safety that blocks prompt injections and unsafe tool calls, redacts PII and secrets, and runs red-team scenarios.
Added
Delve
Compliance automation that uses AI agents to handle SOC 2, HIPAA and GDPR busywork.
Added
Sonatype MCP
Sonatype's dependency-management MCP server that gives coding agents component versions, security analysis and Trust Score recommendations.
Added
Cisco MCP Scanner
Cisco's open-source scanner that checks MCP servers and tools for malicious or risky behaviour using YARA rules and LLM analysis.
Added
Dropzone AI
AI SOC analyst agents that investigate security alerts autonomously.
Added
Guardrails AI
Open-source framework for validating LLM inputs and outputs with configurable guardrails.
Added
Mindflow
No-code automation and AI agents for security and IT operations.
Added
Zenity
Security and governance for AI agents across enterprise platforms.
Added
Simbian
AI agents for security operations, threat hunting and response.
Added
Prophet Security
Agentic AI SOC analyst that triages and investigates alerts.
Added
Token Security
Security for non-human and AI agent identities.
Added
Strix
Open-source AI agents that run penetration tests on your app to find and help fix security vulnerabilities.
Added
AI-Infra-Guard
Tencent's AI red-teaming platform that scans agents, skills and MCP servers for risks.
Added
Agent Governance Toolkit
Microsoft toolkit for policy enforcement, identity and sandboxing for AI agents.
Added
Failproof AI
Observability and policy enforcement for AI agent harnesses.
Added
Tracecat
Open-source security automation platform for teams and AI agents.
Added
PentestAgent
Agent framework for black-box security testing and bug bounty work.
Added
Snyk Agent Scan
Snyk's scanner for security risks in MCP servers and agent skills.
Added
Top security & governance repos on GitHub (14)
| Repo | GitHub stars | Licence | Last push |
|---|---|---|---|
| Strix ↗ | 69,022 | Apache License 2.0 | 2026-10-17 |
| Guardrails AI ↗ | 7,529 | Apache License 2.0 | 2026-08-26 |
| AI-Infra-Guard ↗ | 6,887 | Apache License 2.0 | 2026-10-16 |
| Superagent ↗ | 6,766 | — | 2026-08-25 |
| Agent Governance Toolkit ↗ | 6,435 | MIT | 2026-10-18 |
| Failproof AI ↗ | 5,560 | MIT | 2026-10-16 |
| Tracecat ↗ | 3,835 | GNU AGPL v3.0 | 2026-10-17 |
| PentestAgent ↗ | 3,188 | MIT | 2026-09-21 |
| Snyk Agent Scan ↗ | 3,142 | Apache License 2.0 | 2026-10-15 |
| Mantis ↗ | 2,459 | — | 2026-10-17 |
| Agent Vault ↗ | 2,368 | — | 2026-10-01 |
| Agent Safehouse ↗ | 2,110 | — | 2026-10-17 |
| ADR ↗ | 2,064 | — | 2026-10-16 |
| Cisco MCP Scanner ↗ | 1,094 | — | — |
14 repos. Stars and licence come from each repo, checked when the listing was last verified.
All categories
Related searches
Who uses these
Best-of lists
Alternatives pages
Facts come from our directory listings; pricing is as each maker states it. Check official sites before you choose.