Independent directory
All AI security tools
Shortlist tools for one job, such as screening live prompts or scanning model files, before you talk to vendors. Filter every open-source and commercial tool we list by category, security layer, type, deployment, OWASP LLM risk and pricing model. Each fact links to its source and the date we checked it.
Category is where we compare a tool. Covers layer shows every AI security layer its documented capabilities reach. GitHub stars show popularity on the date we read them, not security; how we use them.
| Tool | Type | Deployment | Pricing model | OWASP risks | Coverage Score | Last reviewed |
|---|---|---|---|---|---|---|
| NeMo GuardrailsNVIDIA · Guardrails 7,341 stars as of Oct 21, 2026; last push Oct 22, 2026 | Open sourceApache-2.0 |
| Free |
| 76 out of 100 | |
| PortkeyPalo Alto Networks (Portkey) · Guardrails Now Prisma AIRS AI Gateway 13,245 stars as of Oct 21, 2026; last push May 25, 2026 | Open sourceMIT |
| Freemium |
| 69 out of 100 | |
| Kong AI GatewayKong · Guardrails 44,287 stars as of Oct 21, 2026; last push Oct 19, 2026 | Open sourceApache-2.0 |
| Usage-based |
| 65 out of 100 | |
| Bedrock GuardrailsAmazon Web Services · Guardrails | Commercial |
| Usage-based |
| 60 out of 100 | |
| Granite GuardianIBM · Guardrails 188 stars as of Oct 21, 2026; last push Oct 16, 2026 | Open sourceApache-2.0 |
| Free |
| 57 out of 100 | |
| Lakera GuardCheck Point (Lakera) · Guardrails Now Check Point AI Guardrails | Commercial |
| Not published |
| 57 out of 100 | |
| Llama ProtectionsMeta · Guardrails 4,444 stars as of Oct 21, 2026; last push Oct 12, 2026 | Open, custom license |
| Free |
| 56 out of 100 | |
| Azure AI Content SafetyMicrosoft · Guardrails Renamed | Commercial |
| Freemium |
| 55 out of 100 | |
| Guardrails AIGuardrails AI · Guardrails 7,552 stars as of Oct 21, 2026; last push Oct 21, 2026 | Open sourceApache-2.0 |
| Free |
| 52 out of 100 | |
| Qwen3GuardAlibaba Cloud · Guardrails 525 stars as of Oct 21, 2026; last push Oct 21, 2025 | Open sourceApache-2.0 |
| Free |
| 50 out of 100 | |
| Cloudflare AI GatewayCloudflare · Guardrails | Commercial |
| Freemium |
| 48 out of 100 | |
| Pangea AI GuardCrowdStrike (Pangea) · Guardrails | Commercial |
| Not published |
| 48 out of 100 | |
| Vigildeadbits · Guardrails 507 stars as of Oct 21, 2026; last push Jan 31, 2024 inactive | Open sourceApache-2.0 |
| Free |
| 48 out of 100 | |
| Cisco AI DefenseCisco · Guardrails | Commercial |
| Not published |
| 47 out of 100 | |
| Model ArmorGoogle Cloud · Guardrails | Commercial |
| Usage-based |
| 44 out of 100 | |
| gpt-oss-safeguardOpenAI · Guardrails 61 stars as of Oct 21, 2026; last push Jan 14, 2026 | Open sourceApache-2.0 |
| Free | None mapped | 44 out of 100 | |
| AliceAlice · Guardrails | Commercial |
| Not published |
| 42 out of 100 | |
| Radware LLM FirewallRadware · Guardrails | Commercial |
| Not published |
| 41 out of 100 | |
| Lasso SecurityLasso Security · Guardrails | Commercial |
| Not published |
| 39 out of 100 | |
| HiddenLayer AIDRHiddenLayer · Guardrails | Commercial |
| Not published |
| 37 out of 100 | |
| CalypsoAIF5 (CalypsoAI) · Guardrails Now F5 AI Guardrails | Commercial |
| Not published |
| 32 out of 100 | |
| Firewall for AICloudflare · Guardrails Now AI Security for Apps | Commercial |
| Contact sales |
| 29 out of 100 | |
| Prompt SecuritySentinelOne (Prompt Security) · Guardrails | Commercial |
| Not published |
| 29 out of 100 | |
| LLM GuardPalo Alto Networks (Protect AI) · Guardrails Archived 3,217 stars as of Oct 21, 2026; last push Jul 8, 2026 archived | Open sourceMIT |
| Free |
| 66 out of 100 | |
| RebuffPalo Alto Networks (Protect AI) · Guardrails Archived 1,531 stars as of Oct 21, 2026; last push Aug 7, 2024 archived | Open sourceApache-2.0 |
| Free |
| 42 out of 100 | |
| garakNVIDIA · Red teaming 9,636 stars as of Oct 21, 2026; last push Oct 21, 2026 | Open sourceApache-2.0 |
| Free |
| 82 out of 100 | |
| GiskardGiskard AI · Red teaming 5,916 stars as of Oct 21, 2026; last push Oct 20, 2026 | Open sourceApache-2.0 |
| Freemium |
| 81 out of 100 | |
| PromptfooOpenAI (Promptfoo) · Red teaming 26,250 stars as of Oct 21, 2026; last push Oct 22, 2026 | Open sourceMIT |
| Freemium |
| 80 out of 100 | |
| AugustusPraetorian · Red teaming 309 stars as of Oct 21, 2026; last push Oct 20, 2026 | Open sourceApache-2.0 |
| Free |
| 75 out of 100 | |
| PyRITMicrosoft · Red teaming 4,668 stars as of Oct 21, 2026; last push Oct 22, 2026 | Open sourceMIT |
| Free |
| 73 out of 100 | |
| Agentic RadarZscaler (SPLX) · Red teaming 1,058 stars as of Oct 21, 2026; last push Nov 27, 2025 | Open sourceApache-2.0 |
| Free |
| 71 out of 100 | |
| DeepTeamConfident AI · Red teaming 3,035 stars as of Oct 21, 2026; last push Oct 20, 2026 | Open sourceApache-2.0 |
| Free |
| 71 out of 100 | |
| SpikeeReversec · Red teaming 268 stars as of Oct 21, 2026; last push Sep 11, 2026 | Open sourceApache-2.0 |
| Free |
| 69 out of 100 | |
| InspectUK AI Security Institute · Red teaming 3,058 stars as of Oct 21, 2026; last push Oct 21, 2026 | Open sourceMIT |
| Free | None mapped | 64 out of 100 | |
| FuzzyAIPalo Alto Networks (CyberArk) · Red teaming 1,587 stars as of Oct 21, 2026; last push Feb 6, 2026 | Open sourceApache-2.0 |
| Free |
| 61 out of 100 | |
| Agentic Securitymsoedov (open-source maintainer) · Red teaming 2,024 stars as of Oct 21, 2026; last push Oct 19, 2026 | Open sourceApache-2.0 |
| Free |
| 60 out of 100 | |
| MindgardMindgard · Red teaming | Commercial |
| Not published |
| 59 out of 100 | |
| promptmaputkusen · Red teaming 1,288 stars as of Oct 21, 2026; last push Dec 1, 2025 | Open sourceGPL-3.0 |
| Free |
| 56 out of 100 | |
| ARTLF AI & Data Foundation · Red teaming 6,283 stars as of Oct 21, 2026; last push Oct 8, 2026 | Open sourceMIT |
| Free |
| 55 out of 100 | |
| AI Red Teaming AgentMicrosoft · Red teaming | Commercial |
| Usage-based |
| 53 out of 100 | |
| b3 benchmarkCheck Point (Lakera) and UK AI Security Institute · Red teaming | Open sourceMIT |
| Free |
| 53 out of 100 | |
| Gray SwanGray Swan · Red teaming | Commercial |
| Not published |
| 52 out of 100 | |
| SPLXZscaler (SPLX) · Red teaming | Commercial |
| Contact sales |
| 51 out of 100 | |
| Adversa AIAdversa AI · Red teaming | Commercial |
| Not published |
| 50 out of 100 | |
| TextAttackQData · Red teaming 3,475 stars as of Oct 21, 2026; last push Aug 15, 2026 | Open sourceMIT |
| Free | None mapped | 49 out of 100 | |
| Enkrypt AIAnaconda (Enkrypt AI) · Red teaming | Commercial |
| Freemium | None mapped | 47 out of 100 | |
| Lakera RedCheck Point (Lakera) · Red teaming | Commercial |
| Contact sales |
| 45 out of 100 | |
| HarmBenchCenter for AI Safety · Red teaming 1,076 stars as of Oct 21, 2026; last push Aug 16, 2024 inactive | Open sourceMIT |
| Free | None mapped | 42 out of 100 | |
| Repello AIRepello AI · Red teaming | Commercial |
| Not published |
| 31 out of 100 | |
| ModelAuditOpenAI (Promptfoo) · Supply chain 81 stars as of Oct 21, 2026; last push Oct 21, 2026 | Open sourceMIT |
| Free |
| 86 out of 100 | |
| ModelScanPalo Alto Networks (Protect AI) · Supply chain 786 stars as of Oct 21, 2026; last push Sep 28, 2026 | Open sourceApache-2.0 |
| Free |
| 84 out of 100 | |
| model-transparencySigstore · Supply chain 249 stars as of Oct 21, 2026; last push Oct 19, 2026 | Open sourceApache-2.0 |
| Free |
| 78 out of 100 | |
| picklescanMatthieu Maitre · Supply chain 428 stars as of Oct 21, 2026; last push Oct 20, 2026 | Open sourceMIT |
| Free |
| 73 out of 100 | |
| FicklingTrail of Bits · Supply chain 674 stars as of Oct 21, 2026; last push Oct 15, 2026 | Open sourceLGPL-3.0 |
| Free |
| 68 out of 100 | |
| HiddenLayer ScannerHiddenLayer · Supply chain | Commercial |
| Not published |
| 58 out of 100 | |
| safetensorsPyTorch Foundation (Linux Foundation) · Supply chain 3,931 stars as of Oct 21, 2026; last push Oct 6, 2026 | Open sourceApache-2.0 |
| Free |
| 58 out of 100 | |
| JFrog ML SecurityJFrog · Supply chain | Commercial |
| Paid |
| 53 out of 100 | |
| Hub scanningHugging Face · Supply chain | Commercial |
| Included with platform |
| 42 out of 100 | |
| Evo AI-SPMSnyk · AI-SPM | Commercial |
| Usage-based |
| 64 out of 100 | |
| Defender AI-SPMMicrosoft · AI-SPM | Commercial |
| Included with platform |
| 55 out of 100 | |
| Wiz AI-SPMGoogle (Wiz) · AI-SPM | Commercial |
| Not published |
| 54 out of 100 | |
| Noma SecurityNoma Security · AI-SPM | Commercial |
| Not published |
| 53 out of 100 | |
| AQtive Guard AI-SPMSandboxAQ · AI-SPM | Commercial |
| Not published |
| 50 out of 100 | |
| Zscaler AI-SPMZscaler · AI-SPM | Commercial |
| Not published |
| 49 out of 100 | |
| Prisma AIRSPalo Alto Networks · AI-SPM | Commercial |
| Not published |
| 44 out of 100 | |
| Orca AI-SPMOrca Security · AI-SPM | Commercial |
| Not published |
| 40 out of 100 | |
| DefenseClawCisco · Agent security 888 stars as of Oct 21, 2026; last push Oct 22, 2026 | Open sourceApache-2.0 |
| Free |
| 76 out of 100 | |
| Docker MCP GatewayDocker · Agent security 1,612 stars as of Oct 21, 2026; last push Oct 21, 2026 | Open sourceMIT |
| Free |
| 72 out of 100 | |
| agentgatewayagentgateway (a Series of LF Projects, LLC) · Agent security 5,472 stars as of Oct 21, 2026; last push Oct 22, 2026 | Open sourceApache-2.0 |
| Free |
| 69 out of 100 | |
| NeuralTrustNeuralTrust · Agent security 15 stars as of Oct 21, 2026; last push Oct 21, 2026 | Open sourceApache-2.0 |
| Freemium |
| 68 out of 100 | |
| ContextForgeIBM · Agent security 4,676 stars as of Oct 21, 2026; last push Oct 21, 2026 | Open sourceApache-2.0 |
| Free |
| 64 out of 100 | |
| OpenShellNVIDIA · Agent security 17,031 stars as of Oct 21, 2026; last push Oct 22, 2026 | Open sourceApache-2.0 |
| Free |
| 64 out of 100 | |
| Strands BoxAmazon Web Services · Agent security 451 stars as of Oct 21, 2026; last push Oct 22, 2026 | Open sourceApache-2.0 |
| Free |
| 64 out of 100 | |
| AktoAkto · Agent security 1,532 stars as of Oct 21, 2026; last push Oct 21, 2026 | Open sourceMIT |
| Contact sales |
| 63 out of 100 | |
| MCP-ScanSnyk (Invariant Labs) · Agent security Now Snyk Agent Scan 3,161 stars as of Oct 21, 2026; last push Oct 21, 2026 | Open sourceApache-2.0 |
| Not published |
| 63 out of 100 | |
| Agent Governance ToolkitMicrosoft · Agent security 6,454 stars as of Oct 21, 2026; last push Oct 21, 2026 | Open sourceMIT |
| Free |
| 63 out of 100 | |
| Cisco MCP ScannerCisco · Agent security 1,096 stars as of Oct 21, 2026; last push Oct 21, 2026 | Open sourceApache-2.0 |
| Free |
| 61 out of 100 | |
| Cisco Skill ScannerCisco · Agent security 2,620 stars as of Oct 21, 2026; last push Oct 21, 2026 | Open sourceApache-2.0 |
| Free |
| 60 out of 100 | |
| Uber ADRUber · Agent security 2,072 stars as of Oct 21, 2026; last push Oct 19, 2026 | Open sourceApache-2.0 |
| Free |
| 59 out of 100 | |
| Lasso MCP GatewayLasso Security · Agent security 396 stars as of Oct 21, 2026; last push Jan 22, 2026 | Open sourceMIT |
| Free |
| 57 out of 100 | |
| AgentCore PolicyAmazon Web Services · Agent security | Commercial |
| Usage-based |
| 55 out of 100 | |
| Invariant GuardrailsSnyk (Invariant Labs) · Agent security 472 stars as of Oct 21, 2026; last push Jan 12, 2026 | Open sourceApache-2.0 |
| Free |
| 54 out of 100 | |
| mcp-context-protectorTrail of Bits · Agent security 226 stars as of Oct 21, 2026; last push Apr 14, 2026 | Open sourceApache-2.0 |
| Free |
| 53 out of 100 | |
| Kubernetes Agent SandboxKubernetes SIG Apps · Agent security 4,347 stars as of Oct 21, 2026; last push Oct 22, 2026 | Open sourceApache-2.0 |
| Free |
| 52 out of 100 | |
| Agent GatewayGoogle Cloud · Agent security | Commercial |
| Not published |
| 50 out of 100 | |
| StraikerStraiker · Agent security | Commercial |
| Not published |
| 49 out of 100 | |
| Pillar SecurityPillar Security · Agent security | Commercial |
| Not published |
| 48 out of 100 | |
| Operant AIOperant AI · Agent security | Commercial |
| Not published |
| 39 out of 100 | |
| MCP Server PortalsCloudflare · Agent security | Commercial |
| Not published |
| 38 out of 100 | |
| ZenityZenity · Agent security | Commercial |
| Not published |
| 35 out of 100 | |
| Oasis SecurityCyera (Oasis Security) · Agent security | Commercial |
| Not published |
| 34 out of 100 | |
| Astrix AI Agent SecurityCisco (Astrix Security) · Agent security | Commercial |
| Not published |
| 33 out of 100 | |
| Falcon GuardianCrowdStrike · Agent security | Commercial |
| Not published |
| 31 out of 100 | |
| Veza AI Agent SecurityServiceNow (Veza) · Agent security | Commercial |
| Not published |
| 29 out of 100 | |
| ProtectoProtecto · Data protection | Commercial |
| Paid |
| 70 out of 100 | |
| PresidioData Privacy Stack · Data protection 11,456 stars as of Oct 21, 2026; last push Oct 19, 2026 | Open sourceMIT |
| Free |
| 67 out of 100 | |
| LiminaLimina · Data protection Now Limina | Commercial |
| Freemium |
| 64 out of 100 | |
| Tonic TextualTonic.ai · Data protection | Commercial |
| Usage-based |
| 60 out of 100 | |
| HarmonicHarmonic Security · Data protection | Commercial |
| Not published |
| 52 out of 100 | |
| Google Cloud Sensitive Data ProtectionGoogle Cloud · Data protection Renamed | Commercial |
| Usage-based |
| 51 out of 100 | |
| SkyflowSkyflow · Data protection | Commercial |
| Not published |
| 50 out of 100 | |
| Purview DSPM for AIMicrosoft · Data protection Renamed | Commercial |
| Usage-based |
| 49 out of 100 | |
| NightfallNightfall · Data protection | Commercial |
| Contact sales |
| 45 out of 100 | |
| WitnessAIWitnessAI · Data protection | Commercial |
| Not published |
| 36 out of 100 | |
| Holistic AIHolistic AI · Governance | Commercial |
| Not published |
| 55 out of 100 | |
| Credo AICredo AI · Governance | Commercial |
| Not published |
| 54 out of 100 | |
| AI VerifyAI Verify Foundation · Governance 103 stars as of Oct 21, 2026; last push Mar 23, 2026 | Open sourceApache-2.0 |
| Free | None mapped | 47 out of 100 | |
| OneTrust AI GovernanceOneTrust · Governance | Commercial |
| Contact sales |
| 46 out of 100 | |
| SaidotSaidot · Governance | Commercial |
| Not published |
| 42 out of 100 | |
| watsonx.governanceIBM · Governance | Commercial |
| Paid | None mapped | 36 out of 100 | |
| ModelOp CenterModelOp · Governance | Commercial |
| Not published |
| 33 out of 100 |
No tools match these filters. Clear a filter to see more.
Coverage Score compares tools within one category, so read it next to the category, not across the whole list. What this measures. We compile from the vendors' own public pages and do not run the products. Each tool page lists every source link with the date we checked it, and the corrections page takes reports of mistakes.