agentic_security
Agentic Security is an open-source scanner that probes LLMs and agent workflows for vulnerabilities. The README lists multimodal attacks across text, images and audio, multi-step jailbreak sequences, fuzzing with randomized inputs, API integration and stress testing with high-volume attack scenarios, and reinforcement-learning-based attacks that adapt to the model's defenses. It is meant for developers, researchers and security teams who want to find weaknesses before deployment.
Install with `pip install agentic_security` and start the web UI with `agentic_security` (it serves on port 8718 by default; `--port` and `--host` change that). The target is described with a plain-text HTTP spec, such as a POST to an OpenAI-style chat completions URL with an `Authorization: Bearer` header, where `>` is replaced by each attack prompt during the scan. You can add your own CSV datasets with a `prompt` column, and run it as a CI check: `agentic_security init` writes an `agesec.toml` with the LLM spec, a maximum budget and a failure threshold. The README leaves some sections, such as adding integration templates, marked TBD. It is Apache licensed.
Features
Why choose it
Trade-offs
Maintenance check
- Last commit
- 2026-10-19
- Commits, last 90 days
- 59
- Releases, last 90 days
- 0
- Latest release
- 0.7.5 (2026-06-03)
- Open issues
- 11
- Recent issues with at least one comment
- 5/9
Oldest week on the left; the latest four weeks are orange. Source: GitHub commit activity.
Status rule: archived on GitHub = Archived; last commit within 90 days = Active; 91 to 365 days = Slowing; older = Stale. All figures come from the GitHub API on the date shown.
Most discussed open issues
- #358 Scanner reports a fully-jailbroken model as PASS/grade-A and a well-defended model as FAIL/grade-E2 comments · 2026-10-25
- #334 CORS: allow_origins=["*"] exposes unauthenticated /scan, /scan-csv, /stop, /verify to any web origin2 comments · 2026-08-28
- #78 Introduce multi-prompt variable templates for greater flexibility2 comments · 2025-01-16
- #327 What should failureRate count when leak detectors are enabled?1 comments · 2026-08-14
- #76 Create a mechanism to blend multiple datasets together1 comments · 2025-01-16
Issue titles are quoted from GitHub. Open the link to check whether a problem still applies to the version you use.
Who it fits
- You want to red-team your own LLM or agent endpoint with multimodal attacks, multi-step jailbreaks, fuzzing and RL-based probes.
- Your target is any HTTP API: you describe it with a plain-text request spec.
- You want a CI check with a budget and a failure threshold, and your own CSV prompt datasets.
- You are not authorised to test the target: only scan systems you own or may test.
- You need to vet MCP servers before installing them: it tests model endpoints, not MCP server code.
- API cost is a problem: scans send many attack prompts.
How it differs
MCP Scanner inspects MCP servers, tools and their code. Agentic Security sends attack prompts to the model or agent you deploy.
Compatibility
Quick start
Use cases
Alternatives
Featured in these lists
Comments
No comments yet. Be the first!