Security & Testing ListingsSecurity & Testing

Toolguard

The "Cloudflare for AI Agents". 7-layer security interceptor, real-time observability dashboard, and automated reliability testing for MCP and AI tool chains. Prevent hallucinations, prompt injection, and destructive tool calls.

Platform

The approval and accountability layer for agentic AI. Identity → Policy → Approval → Trace. Try: npx sidclaw-demo

Securevector AI Threat Monitor

Security & Observability for AI Agents — audit every tool call, enforce allow/block policies, catch prompt injection and data leaks. Local-first; works with Claude Code, Codex, Copilot CLI, OpenClaw, LangChain, and all major LLM APIs.

Mpak

Open-source package registry for MCP (Model Context Protocol) servers with built-in security scanning, trust scoring (L1-L4), and CLI. Every bundle verified across 25 supply-chain controls.

Ziran

ZIRAN finds the vulnerabilities in AI agents that come from tools combining, not from any single prompt. Graph-based tool chain discovery, execution-level side-effect detection, multi-phase campaigns.

Lynx

Policy-gated, durable, audited execution for AI agent tool calls. Every action gets a five-verdict policy check, a crash-safe checkpoint, and a tamper-evident audit event — a library, not a server.

Agentleak

Open-source privacy testing for AI agents. Python SDK, CLI and MCP tools to detect data leaks across tool calls, memory, inter-agent messages and logs, with redacted reports and CI gates.

Drako

AI agent security and governance platform for the full lifecycle. Scan before you ship. Govern and block at runtime. No Azure required.

Dotforge

Configuration governance for Claude Code. Bootstrap, audit, sync, and evolve .claude/ across projects.

Golf Scanner

Discover and audit MCP servers for security vulnerabilities across Claude Code, Cursor, VS Code, and more

YeepForge

Automated web application penetration testing framework: OWASP Top 10 + advanced attacks, an autonomous AI agent (Ollama/Claude/OpenAI), SAST source-code analysis, and an MCP server, with professional CVSS-scored reports.

Agentegrity

The open standard for AI agent integrity. Evaluate, enforce, and prove that autonomous agents are adversarially coherent, environmentally portable, and verifiably assured.

Intelstrike

AI-powered pipeline that transforms Cyber Threat Intelligence into actionable pentesting test cases using CrewAI and MITRE ATT&CK

MCP Scribe

Point it at an OpenAPI schema. Get an MCP server.

ToolMesh

Self-hosted MCP gateway with authorization, credential injection, audit logging, and output policies. Includes DADL — describe REST APIs as MCP tools in YAML.