AI security testing and pentest agents (2026)

Agents that probe apps, code and smart contracts the way an attacker would and suggest fixes. Here are all 8 from the AgentScout directory.

How we picked and ranked: tools are matched by category, the pricing each maker states and what each tool says it does. They are ranked by GitHub stars as recorded on each listing (link checks 2026-10-18); tools without a tracked repo follow, by listing maturity. No paid placements.

1. S

   1. Strix

   codingOpen source + cloud★ 69,022 GitHub stars

   Open-source AI agents that run penetration tests on your app to find and help fix security vulnerabilities.

   Pricing (as stated): Open source + cloud · Mature

2. P

   2. PentAGI

   codingOpen source★ 30,728 GitHub stars

   Autonomous multi-agent system for running penetration testing tasks.

   Pricing (as stated): Open source · Mature

3. A

   3. AI-Infra-Guard

   evals & observabilityOpen source★ 6,887 GitHub stars

   Tencent's AI red-teaming platform that scans agents, skills and MCP servers for risks.

   Pricing (as stated): Open source · Mature

4. P

   4. PentestAgent

   codingOpen source★ 3,188 GitHub stars

   Agent framework for black-box security testing and bug bounty work.

   Pricing (as stated): Open source · Active

5. S

   5. SonarQube MCP Server

   MCP & infraOpen source★ 665 GitHub stars

   SonarQube MCP server for code quality and security analysis from agents.

   Pricing (as stated): Open source · Active

6. A

   6. Almanax

   cryptoSee site

   AI security engineer that finds vulnerabilities in applications and smart contracts and reviews pull requests; acquired by depthfirst (June 2026).

   Pricing (as stated): 7-day free trial; paid plans · Active

7. O

   7. Octane

   cryptoSee site

   Agentic security analysis that finds exploitable vulnerabilities in mission-critical code, including DeFi smart contracts.

   Pricing (as stated): See site · Active

8. S

   8. Sherlock AI

   cryptoSee site

   Sherlock's AI auditor for smart-contract vulnerabilities.

   Pricing (as stated): See site · Active

FAQ

What are the best AI pentest agents?

Ranked by tracked GitHub stars, the top AI pentest agents in our directory are Strix, PentAGI, AI-Infra-Guard, PentestAgent, SonarQube MCP Server. Stars measure popularity, not fit, so compare a few against your own task.

How many AI pentest agents does AgentScout list?

8 tools match. This page shows the top 8. Pricing mix on this page: Open source (4), See site (3), Open source + cloud (1).

How much do these tools cost?

Pricing is what each maker states on their site. Open-source tools are free to self-host but may need a paid model API key or offer paid cloud plans; freemium tools have a free plan with limits. Check each official site.

Where can I see every tool for security testing?

Our task page lists all 8 tools we match to security testing.

Related: All tools for security testing · coding (3) · crypto (3) · evals & observability (1) · MCP & infra (1)

By role: For security engineers

All popular searches · AI agents by role · Free tools

Best-of lists: Cursor alternatives · All best lists

Facts come from our directory listings; pricing is as each maker states it and can change. Check official sites before you choose.