AI Defense Stack

Open source

Open-source AI security tools

With an open-source tool, your team installs, runs and patches the code, so check the license and recent maintenance before you depend on it. Each project here publishes its source under a stated license. We show that license, the GitHub star count on the day we checked and the latest activity; stars measure attention, not quality.

  • 52 projects
  • Last reviewed

LLM firewalls & guardrails

Open-source tools in LLM firewalls & guardrails
Tool License GitHub stars Latest activity Coverage Score
NeMo GuardrailsNVIDIA Apache-2.0 7,341 as of Oct 21, 2026 76 out of 100
PortkeyPalo Alto Networks (Portkey) Now Prisma AIRS AI Gateway MIT 13,245 as of Oct 21, 2026 69 out of 100
Kong AI GatewayKong Apache-2.0 44,287 as of Oct 21, 2026 65 out of 100
Granite GuardianIBM Apache-2.0 188 as of Oct 21, 2026 57 out of 100
Llama ProtectionsMeta Custom 4,444 as of Oct 21, 2026 56 out of 100
Guardrails AIGuardrails AI Apache-2.0 7,552 as of Oct 21, 2026 52 out of 100
Qwen3GuardAlibaba Cloud Apache-2.0 525 as of Oct 21, 2026 50 out of 100
Vigildeadbits Apache-2.0 507 as of Oct 21, 2026 48 out of 100
gpt-oss-safeguardOpenAI Apache-2.0 61 as of Oct 21, 2026 44 out of 100
LLM GuardPalo Alto Networks (Protect AI) Archived MIT 3,217 as of Oct 21, 2026 66 out of 100
RebuffPalo Alto Networks (Protect AI) Archived Apache-2.0 1,531 as of Oct 21, 2026 42 out of 100

AI red teaming & LLM evaluation

Open-source tools in AI red teaming & LLM evaluation
Tool License GitHub stars Latest activity Coverage Score
garakNVIDIA Apache-2.0 9,636 as of Oct 21, 2026 82 out of 100
GiskardGiskard AI Apache-2.0 5,916 as of Oct 21, 2026 81 out of 100
PromptfooOpenAI (Promptfoo) MIT 26,250 as of Oct 21, 2026 80 out of 100
AugustusPraetorian Apache-2.0 309 as of Oct 21, 2026 75 out of 100
PyRITMicrosoft MIT 4,668 as of Oct 21, 2026 73 out of 100
Agentic RadarZscaler (SPLX) Apache-2.0 1,058 as of Oct 21, 2026 71 out of 100
DeepTeamConfident AI Apache-2.0 3,035 as of Oct 21, 2026 71 out of 100
SpikeeReversec Apache-2.0 268 as of Oct 21, 2026 69 out of 100
InspectUK AI Security Institute MIT 3,058 as of Oct 21, 2026 64 out of 100
FuzzyAIPalo Alto Networks (CyberArk) Apache-2.0 1,587 as of Oct 21, 2026 61 out of 100
Agentic Securitymsoedov (open-source maintainer) Apache-2.0 2,024 as of Oct 21, 2026 60 out of 100
promptmaputkusen GPL-3.0 1,288 as of Oct 21, 2026 56 out of 100
ARTLF AI & Data Foundation MIT 6,283 as of Oct 21, 2026 55 out of 100
b3 benchmarkCheck Point (Lakera) and UK AI Security Institute MIT Not documented Not documented 53 out of 100
TextAttackQData MIT 3,475 as of Oct 21, 2026 49 out of 100
HarmBenchCenter for AI Safety MIT 1,076 as of Oct 21, 2026 42 out of 100

Model & ML supply-chain security

Open-source tools in Model & ML supply-chain security
Tool License GitHub stars Latest activity Coverage Score
ModelAuditOpenAI (Promptfoo) MIT 81 as of Oct 21, 2026 86 out of 100
ModelScanPalo Alto Networks (Protect AI) Apache-2.0 786 as of Oct 21, 2026 84 out of 100
model-transparencySigstore Apache-2.0 249 as of Oct 21, 2026 78 out of 100
picklescanMatthieu Maitre MIT 428 as of Oct 21, 2026 73 out of 100
FicklingTrail of Bits LGPL-3.0 674 as of Oct 21, 2026 68 out of 100
safetensorsPyTorch Foundation (Linux Foundation) Apache-2.0 3,931 as of Oct 21, 2026 58 out of 100

Agent & MCP security

Open-source tools in Agent & MCP security
Tool License GitHub stars Latest activity Coverage Score
DefenseClawCisco Apache-2.0 888 as of Oct 21, 2026 76 out of 100
Docker MCP GatewayDocker MIT 1,612 as of Oct 21, 2026 72 out of 100
agentgatewayagentgateway (a Series of LF Projects, LLC) Apache-2.0 5,472 as of Oct 21, 2026 69 out of 100
NeuralTrustNeuralTrust Apache-2.0 15 as of Oct 21, 2026 68 out of 100
ContextForgeIBM Apache-2.0 4,676 as of Oct 21, 2026 64 out of 100
OpenShellNVIDIA Apache-2.0 17,031 as of Oct 21, 2026 64 out of 100
Strands BoxAmazon Web Services Apache-2.0 451 as of Oct 21, 2026 64 out of 100
AktoAkto MIT 1,532 as of Oct 21, 2026 63 out of 100
MCP-ScanSnyk (Invariant Labs) Now Snyk Agent Scan Apache-2.0 3,161 as of Oct 21, 2026 63 out of 100
Agent Governance ToolkitMicrosoft MIT 6,454 as of Oct 21, 2026 63 out of 100
Cisco MCP ScannerCisco Apache-2.0 1,096 as of Oct 21, 2026 61 out of 100
Cisco Skill ScannerCisco Apache-2.0 2,620 as of Oct 21, 2026 60 out of 100
Uber ADRUber Apache-2.0 2,072 as of Oct 21, 2026 59 out of 100
Lasso MCP GatewayLasso Security MIT 396 as of Oct 21, 2026 57 out of 100
Invariant GuardrailsSnyk (Invariant Labs) Apache-2.0 472 as of Oct 21, 2026 54 out of 100
mcp-context-protectorTrail of Bits Apache-2.0 226 as of Oct 21, 2026 53 out of 100
Kubernetes Agent SandboxKubernetes SIG Apps Apache-2.0 4,347 as of Oct 21, 2026 52 out of 100

GenAI data-leak prevention & privacy

Open-source tools in GenAI data-leak prevention & privacy
Tool License GitHub stars Latest activity Coverage Score
PresidioData Privacy Stack MIT 11,456 as of Oct 21, 2026 67 out of 100

AI governance, risk & compliance

Open-source tools in AI governance, risk & compliance
Tool License GitHub stars Latest activity Coverage Score
AI VerifyAI Verify Foundation Apache-2.0 103 as of Oct 21, 2026 47 out of 100

Licenses are as stated in each repository. Open source does not mean free of support or hosting costs; see each tool page for pricing and deployment. Browse all tools.

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.

NVIDIA NeMo Guardrails (2 sources)
Portkey AI Gateway (1 sources)
Kong AI Gateway (1 sources)
IBM Granite Guardian (2 sources)
Meta Llama Protections (2 sources)
Guardrails AI (1 sources)
Qwen3Guard (2 sources)
Vigil (1 sources)
OpenAI gpt-oss-safeguard (2 sources)
LLM Guard (1 sources)
Rebuff (1 sources)
garak (2 sources)
Giskard (2 sources)
Promptfoo (2 sources)
Augustus (2 sources)
PyRIT (2 sources)
Agentic Radar (2 sources)
DeepTeam (2 sources)
Spikee (2 sources)
Inspect (2 sources)
FuzzyAI (2 sources)
Agentic Security (2 sources)
promptmap (2 sources)
Adversarial Robustness Toolbox (2 sources)
b3: Backbone Breaker Benchmark (1 sources)
TextAttack (2 sources)
HarmBench (2 sources)
ModelAudit (Promptfoo) (2 sources)
ModelScan (2 sources)
Sigstore model-transparency (model-signing) (2 sources)
picklescan (2 sources)
Fickling (2 sources)
safetensors (2 sources)
Cisco DefenseClaw (2 sources)
Docker MCP Gateway (2 sources)
agentgateway (2 sources)
NeuralTrust (1 sources)
IBM ContextForge (2 sources)
NVIDIA OpenShell (1 sources)
Strands Box (2 sources)
Akto (2 sources)
MCP-Scan (Snyk Agent Scan) (2 sources)
Microsoft Agent Governance Toolkit (2 sources)
Cisco MCP Scanner (2 sources)
Cisco Skill Scanner (2 sources)
Uber ADR (2 sources)
Lasso MCP Gateway (2 sources)
Invariant Guardrails (2 sources)
mcp-context-protector (2 sources)
Kubernetes Agent Sandbox (1 sources)
Presidio (2 sources)
AI Verify (2 sources)