AgentIndex icon
AgentIndex
ToolsCategoriesTrendingNewCompare
Submit Tool
Home/
Security & Safety/
toolbox
toolbox logo

toolbox

Active·★ 25·MIT·Updated 2026-05-29
★ Trending★ Security & Safety★ Dev Tooling

Collaborative application security testing between humans and agents via CLI and MCP

Sectool is a collaborative workbench for application security testing, not a scanner. It combines your ability to handle UI and stateful APIs with an agent's strength in analyzing and mutating traffic through a proxy. Together, you can perform more thorough testing with less effort.

#agent#agent-collaboration#application-security#appsec#llm#mcp#mcp-servers#model-context-protocol
$ Install
$ go install github.com/go-appsec/toolbox/sectool@latest
↗ Visit site★ GitHub
01

Features

01Wire-fidelity proxy preserving HTTP/1.1 and HTTP/2 details
02Replay captured requests with selective mutations
03Structured flow diffing for fast report validation
04Reflection detection across encoding variants
05Out-of-band interaction testing via Interactsh
02

Compatibility

Linux
Linux
Verified via docs
macOS
macOS
Verified via docs
Windows
Windows
Verified via docs
03

Quick start

1
$ go install github.com/go-appsec/toolbox/sectool@latest
04

Use cases

↳Collaborative security testing with agent handling traffic analysis
↳Vulnerability report validation using test-report workflow
↳Exploratory security testing with automated crawling and mutation
05

Alternatives

awesome-n8n-templates logo
awesome-n8n-templates★ 22.6k
Supercharge your workflow automation with this curated collection of n8n templates! Instantly connect your favorite apps-like Gmail, Telegram, Google Drive, Slack, and more-with ready-to-use, AI-powered automations. Save time, boost productivity, and unlock the true potential of n8n in just a few clicks.
vs →
FastMCP logo
FastMCP★ 25.4k
The fast, Pythonic way to build MCP servers and clients. Designed by the Pydantic team for type safety and speed.
vs →
fastmcp logo
fastmcp★ 25.4k
🚀 The fast, Pythonic way to build MCP servers and clients.
vs →
FunASR logo
FunASR★ 16.6k
Industrial-grade speech recognition toolkit: 170x realtime, 50+ languages, speaker diarization, emotion detection, streaming, and OpenAI-compatible API.
vs →
nuclear logo
nuclear★ 17.7k
Streaming music player that finds free music for you
vs →
holaOS logo
holaOS★ 5.4k
The agent environment for long-horizon work, continuity, and self-evolution.
vs →
openagent logo
openagent★ 5.1k
⚡️AI Cloud OS: Open-source enterprise-level AI knowledge base and MCP (model-context-protocol)/A2A (agent-to-agent) management platform with admin UI, user management and Single-Sign-On⚡️, supports ChatGPT, Claude, Llama, Ollama, HuggingFace, etc., chat bot demo: https://ai.casibase.com, admin UI demo: https://ai-admin.casibase.com
vs →
semble logo
semble★ 4.5k
Fast and Accurate Code Search for Agents
vs →
See all alternatives →

Related searches

toolbox AlternativesBest Security & Safety Tools 2026Open Source Security & Safetytoolbox Tutorialtoolbox Vs Competitorsagentagent-collaborationapplication-security

Comments

Log in to leave a comment
  • S
    Shawn MartinezMay 23, 2026

    Collaborative model means the agent augments rather than replaces security expertise.

  • M
    Marlowe GarciaMay 21, 2026

    Good for application security teams who want AI assistance without losing human judgment.

  • S
    Skyler KimMay 8, 2026

    Human-agent collaboration for appsec testing is the right model for security workflows.

  • J
    Justice AndersonFeb 27, 2026

    CLI and MCP dual interface covers both manual and automated security testing.

On this page
01Features02Compatibility03Quick start04Use cases05Alternatives
Stats
GitHub Stars★ 25
Last commit1d ago
StatusActive
LicenseMIT
CategorySecurity & Safety
Trend (30d)
+1↑ 0.7%
Links
Documentation↗Discussion↗Issues↗Releases↗

Deploy on DigitalOcean — Get $200 Free Credit

Ad
© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
QYSGitHubBuy me a coffee ☕

Browse by Category

Code AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.