AgentIndex icon
AgentIndex
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Submit Tool
ToolsMCP ServersHOTCategoriesTrendingNewBest ListsCompareGuides
Home/
Security & Safety/
agentic_security
agentic_security logo

agentic_security

Active·★ 2.0k·Apache-2.0·Updated 2026-10-19
★ Trending

Agentic Security is an open-source scanner that probes LLMs and agent workflows for vulnerabilities. The README lists multimodal attacks across text, images and audio, multi-step jailbreak sequences, fuzzing with randomized inputs, API integration and stress testing with high-volume attack scenarios, and reinforcement-learning-based attacks that adapt to the model's defenses. It is meant for developers, researchers and security teams who want to find weaknesses before deployment.

Install with `pip install agentic_security` and start the web UI with `agentic_security` (it serves on port 8718 by default; `--port` and `--host` change that). The target is described with a plain-text HTTP spec, such as a POST to an OpenAI-style chat completions URL with an `Authorization: Bearer` header, where `>` is replaced by each attack prompt during the scan. You can add your own CSV datasets with a `prompt` column, and run it as a CI check: `agentic_security init` writes an `agesec.toml` with the LLM spec, a maximum budget and a failure threshold. The README leaves some sections, such as adding integration templates, marked TBD. It is Apache licensed.

This write-up is based on the project's README and public repository data. We have not hand-tested the tool. Data as of 2026-10-25.

License
Apache-2.0
Latest release
0.7.5 · 2026-06-03
Last commit
2026-10-19
Contributors
36
Forks
296
Open issues and PRs
11
First published
2024-04-11
PyPI package
agentic_security 1.0.0 · 185 downloads last week

Source: GitHub, npm and PyPI public APIs.

#AI Security#LLM#Vulnerability Scanner#Jailbreak Detection#Fuzzing
$ Install
$ pip install agentic_security
↗ Visit site★ GitHub
01

Features

01Multimodal Attacks
02Multi-Step Jailbreaks
03Comprehensive Fuzzing
04API Integration & Stress Testing
05RL-Based Attacks
02

Why choose it

+Covers several attack types in one tool: multimodal, multi-step jailbreaks, fuzzing and RL-based probes
+Any HTTP LLM API can be tested through a plain-text request spec
+Can run as a CI check with a config file, a budget and a failure threshold
+Bring your own prompt datasets as CSV files
03

Trade-offs

!Only scan systems you own or are authorized to test; scans send many attack prompts and can incur API cost (hence the budget setting)
!Parts of the README are marked TBD, such as adding LLM integration templates
!Passing API keys in the request spec means the config file must be kept private
!A scanner finds some weaknesses but does not prove a system is safe
05

Maintenance check

ActiveChecked: 2026-10-27
Last commit
2026-10-19
Commits, last 90 days
59
Releases, last 90 days
0
Latest release
0.7.5 (2026-06-03)
Open issues
11
Recent issues with at least one comment
5/9
Commits per week, last 12 weeks
Commits per week, last 12 weeks: 1, 8, 1, 4, 14, 0, 3, 0, 0, 0, 11, 0

Oldest week on the left; the latest four weeks are orange. Source: GitHub commit activity.

Status rule: archived on GitHub = Archived; last commit within 90 days = Active; 91 to 365 days = Slowing; older = Stale. All figures come from the GitHub API on the date shown.

Most discussed open issues

  • #358 Scanner reports a fully-jailbroken model as PASS/grade-A and a well-defended model as FAIL/grade-E2 comments · 2026-10-25
  • #334 CORS: allow_origins=["*"] exposes unauthenticated /scan, /scan-csv, /stop, /verify to any web origin2 comments · 2026-08-28
  • #78 Introduce multi-prompt variable templates for greater flexibility2 comments · 2025-01-16
  • #327 What should failureRate count when leak detectors are enabled?1 comments · 2026-08-14
  • #76 Create a mechanism to blend multiple datasets together1 comments · 2025-01-16

Issue titles are quoted from GitHub. Open the link to check whether a problem still applies to the version you use.

04

Who it fits

Pick it if
  • You want to red-team your own LLM or agent endpoint with multimodal attacks, multi-step jailbreaks, fuzzing and RL-based probes.
  • Your target is any HTTP API: you describe it with a plain-text request spec.
  • You want a CI check with a budget and a failure threshold, and your own CSV prompt datasets.
Look elsewhere if
  • You are not authorised to test the target: only scan systems you own or may test.
  • You need to vet MCP servers before installing them: it tests model endpoints, not MCP server code.
  • API cost is a problem: scans send many attack prompts.
06

How it differs

mcp-scanner logovs mcp-scanner★ 1.1k

MCP Scanner inspects MCP servers, tools and their code. Agentic Security sends attack prompts to the model or agent you deploy.

Full comparison →
07

Compatibility

Garak
Supported
Verified via docs
InspectAI
Supported
Verified via docs
llm-adaptive-attacks
Supported
Verified via docs
Hugging Face Datasets
Supported
Verified via docs
Local CSV Datasets
Supported
Verified via docs
08

Quick start

1
$ pip install agentic_security
09

Use cases

↳AI system vulnerability testing
↳LLM security research
↳DevSecOps for AI
10

Alternatives

⚡Top VS:
VSmcp-scanner★1.1k→VSagent-security-scanner-mcp★124→VSida-pro-mcp★13.2k→VSGhidraMCP★11.6k→
mcp-scanner logo
mcp-scanner★ 1.1k
Scan MCP servers for potential threats & security findings.
VSCompare→
agent-security-scanner-mcp logo
agent-security-scanner-mcp★ 124
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
VSCompare→
ida-pro-mcp logo
ida-pro-mcp★ 13.2k
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
VSCompare→
GhidraMCP logo
GhidraMCP★ 11.6k
MCP Server for Ghidra
VSCompare→
jadx-ai-mcp logo
jadx-ai-mcp★ 2.9k
Plugin for JADX to integrate MCP server
VSCompare→
CyberStrike logo
CyberStrike★ 3.3k
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.
VSCompare→
hackmyagent logo
hackmyagent★ 89
Metasploit for AI agents: scan, attack, and fix AI agents and MCP servers. Open source security toolkit.
VSCompare→
fuzzforge_ai logo
fuzzforge_ai★ 803
AI-powered workflow automation and AI Agents platform for AppSec, Fuzzing & Offensive Security. Automate vulnerability discovery with intelligent fuzzing, AI-driven analysis, and a marketplace of security tools.
VSCompare→
See all alternatives →

Featured in these lists

  • Open-Source Security Tools for MCP Servers and AI Agents

Comments

Log in to leave a comment

No comments yet. Be the first!

On this page
01Features02Why choose it03Trade-offs05Maintenance check04Who it fits06How it differs07Compatibility08Quick start09Use cases10Alternatives
msoedov /
agentic_security
↗

Open-source vulnerability scanner for LLMs and agent workflows

2.0k296Apache-2.0
Last commit1w ago
StatusActive
CategorySecurity & Safety
Contributors36
Latest release0.7.5
Links
Documentation↗Discussion↗Issues↗Releases↗
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
© 2026 AgentIndex.app|Built by a 10-year iOS Developer.
Best by use caseAboutContactAdvertisePrivacy PolicyTerms of UseQYSGitHubBuy me a coffee ☕

Browse by Category

MCP ServersCode AssistantWorkflow AutomationRAG / Knowledge BaseMulti-AgentBrowser AutomationLLM InfraDev ToolingObservability

Not affiliated with Anthropic, OpenAI or Microsoft.