AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompare
Home/
Security & Safety/
AgentHound
AgentHound logo

AgentHound

Active·★ 452·Apache-2.0·Updated 2026-10-21
★ Hidden Gem

AgentHound is an open-source offensive security framework designed to assess the security posture of AI agent infrastructure. It performs reconnaissance, fingerprinting, credential looting, and active exploitation across various layers of the agentic stack, mapping attack paths into a Neo4j graph for comprehensive analysis.

AgentHound sits in the Security & Safety category, so it is usually better judged by workflow fit, deployment style, and team needs than by isolated features alone. Based on the available metadata, it leans most clearly toward Full-spectrum attack surface analysis for AI agent infrastructure.. A representative use case is Performing red team engagements against AI systems.. The listed license is Apache-2.0. GitHub stars are currently 452. Relevant tags include Offensive Security, AI Agent Security.

© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.

Guides

This write-up is based on the project's README and public repository data. We have not hand-tested the tool.

#Offensive Security#AI Agent Security#Red Teaming#Vulnerability Assessment#Graph-based Analysis#LLM Infrastructure#Credential Looping#Model Inversion
$ Install
$ curl -sSfL https://raw.githubusercontent.com/adithyan-ak/agenthound/main/docker/docker-compose.public.yml | docker compose -f - -p agenthound up -d --wait && curl -sSfL https://raw.githubusercontent.com/adithyan-ak/agenthound/main/install.sh | sh
↗ Visit site★ GitHub
01

Features

01Full-spectrum attack surface analysis for AI agent infrastructure.
02Credential inventory and correlation across gateways and services.
03Modelfile, system-prompt, and fine-tune inventory and analysis.
04Model inversion to extract training-data residue.
05Active exploitation modules for tool/instruction poisoning and configuration implants.
02

Why choose it

+Full-spectrum attack surface analysis for AI agent infrastructure.
+Credential inventory and correlation across gateways and services.
+Performing red team engagements against AI systems.
+Supports 5 platforms or runtime environments.
03

Trade-offs

!The final decision should still be made through side-by-side comparison with similar tools.
04

Compatibility

Docker
Runtime
Verified via docs
Go
Language
Verified via docs
macOS
OS
Verified via docs
Linux
OS
Verified via docs
Neo4j
Database
Verified via docs
05

Quick start

1
$ curl -sSfL https://raw.githubusercontent.com/adithyan-ak/agenthound/main/docker/docker-compose.public.yml | docker compose -f - -p agenthound up -d --wait
2
$ curl -sSfL https://raw.githubusercontent.com/adithyan-ak/agenthound/main/install.sh | sh
06

Use cases

↳Performing red team engagements against AI systems.
↳Identifying and mapping attack paths in AI agent infrastructure.
↳Assessing the security posture and blast radius of AI deployments.
↳Auditing agent configuration, prompts, and tool access for vulnerabilities.
07

Alternatives

⚡Top VS:
VSphantom-secrets★18→VScentian★15→VSshellgate★15→

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Why choose it03Trade-offs04Compatibility05Quick start06Use cases
VS
heddle
★14
→
phantom-secrets logo
phantom-secrets★ 18
Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.
VSCompare→
centian logo
centian★ 15
Give your AI agents structure, guardrails, and full observability — the Agent control plane built on MCP.
VSCompare→
shellgate logo
shellgate★ 15
Self hosted secure gateway for AI agents. One token. Full control. Complete audit trail.
VSCompare→
heddle logo
heddle★ 14
Heddle — The policy-and-trust layer for MCP tool servers. Turn YAML configs into validated, policy-enforced MCP tools.
VSCompare→
assay logo
assay★ 13
Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.
VSCompare→
CyberStrike logo
CyberStrike★ 3.2k
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.
VSCompare→
fuzzforge_ai logo
fuzzforge_ai★ 803
AI-powered workflow automation and AI Agents platform for AppSec, Fuzzing & Offensive Security. Automate vulnerability discovery with intelligent fuzzing, AI-driven analysis, and a marketplace of security tools.
VSCompare→
ADR logo
ADR★ 2.1k
ADR (Agentic Detection and Response): open-source telemetry sensor and dual-agent detection framework for securing MCP-based AI agents.
VSCompare→
See all alternatives →
07
Alternatives
adithyan-ak /
AgentHound
↗

Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.

452Apache-2.0
Last commit2d ago
StatusActive
CategorySecurity & Safety
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit