AI agent tools for cybersecurity
Short answer: Our top pick for cybersecurity: nono, with the highest AgentPick Score (78/100) among tools tagged "cybersecurity". Runners-up: onecli (76) and toolhive (76). Compare what each does, its license and how recently it was updated below.
| # | Tool | What it does | Score | Stars | License | Updated |
|---|---|---|---|---|---|---|
| #1 | nono | agent runtime security - zero trust, zero setup, zero latency agent sandbox | 78/100 | ★ 4.5k | Apache-2.0 | 14 Oct 2026 |
| #2 | onecli | Open-source sandboxed agent harness for teams. Giving every employee a secured personal agent. | 76/100 | ★ 3.6k | Apache-2.0 | 14 Oct 2026 |
| #3 | toolhive | ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers. | 76/100 | ★ 2.3k | Apache-2.0 | 14 Oct 2026 |
| #4 | boxlite | The micro-VM for AI agents — light enough to embed on your laptop, elastic enough to power an agentic cloud. | 75/100 | ★ 2.5k | Apache-2.0 | 14 Oct 2026 |
| #5 | ciso-assistant-community | CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ gl… | 74/100 | ★ 4.5k | See repo | 14 Oct 2026 |
| #6 | AiSOC | Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agen… | 73/100 | ★ 2.4k | MIT | 14 Oct 2026 |
| #7 | faraday | Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin … | 72/100 | ★ 6.8k | GPL-3.0 | 6 Oct 2026 |
| #8 | agent-governance-toolkit | AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Cov… | 72/100 | ★ 6.4k | MIT | 14 Oct 2026 |
| #9 | OpenOSINT | AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security resear… | 70/100 | ★ 1.8k | MIT | 14 Oct 2026 |
| #10 | agent-scan | Security scanner for AI agents, MCP servers and agent skills. | 69/100 | ★ 3.1k | Apache-2.0 | 14 Oct 2026 |
| #11 | beelzebub | A secure low code deception runtime framework, leveraging AI for System Virtualization. | 69/100 | ★ 2.2k | GPL-3.0 | 14 Oct 2026 |
| #12 | redamon | Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with hu… | 68/100 | ★ 3.1k | MIT | 14 Oct 2026 |
| #13 | xalgorix | Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript. | 68/100 | ★ 1.2k | Apache-2.0 | 12 Oct 2026 |
| #14 | mcp-scanner | Scan MCP servers for potential threats & security findings. | 68/100 | ★ 1.1k | Apache-2.0 | 14 Oct 2026 |
| #15 | Pentest-Swarm-AI | Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reas… | 67/100 | ★ 3k | AGPL-3.0 | 11 Oct 2026 |
| #16 | stride-gpt | An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodolog… | 67/100 | ★ 1.1k | MIT | 13 Oct 2026 |
| #17 | pentest-ai | Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself. | 66/100 | ★ 1.7k | MIT | 9 Oct 2026 |
| #18 | NeuroSploit | NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations… | 66/100 | ★ 1.4k | MIT | 14 Oct 2026 |
| #19 | agent-safehouse | Sandbox your local AI agents so they can read/write only what they need | 65/100 | ★ 2.1k | Apache-2.0 | 14 Oct 2026 |
| #20 | world-intel-mcp | 139-tool MCP server for real-time global intelligence from free public APIs: markets, SEC filings, conflict, military, aircraft-cohort early warning, … | 63/100 | ★ 944 | MIT | 12 Oct 2026 |
| #21 | Cybermes | Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orc… | 60/100 | ★ 940 | Apache-2.0 | 2 Oct 2026 |
| #22 | Anthropic-Cybersecurity-Skills | 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (F… | 58/100 | ★ 34k | Apache-2.0 | 31 Aug 2026 |
| #23 | pentest-ai-agents | Turn Claude Code into your offensive security research assistant. Specialized AI subagents for authorized penetration testing plan engagements, analyz… | 55/100 | ★ 2.3k | MIT | 6 Oct 2026 |
| #24 | reagent | Reconstruct and validate C/C++ code from compiled programs with AI. | 50/100 | ★ 2.1k | MIT | 9 Sept 2026 |
| #25 | LuaN1aoAgent | LuaN1aoAgent is a fully autonomous AI-driven penetration testing agent powered by graph-based cognitive reasoning. | 50/100 | ★ 1.4k | AGPL-3.0 | 15 Sept 2026 |
| #26 | agentshield | AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plu… | 50/100 | ★ 1.3k | MIT | 10 Sept 2026 |
| #27 | cve-mcp-server | Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, Vi… | 47/100 | ★ 1.6k | Apache-2.0 | 1 Oct 2026 |
| #28 | metorial | Connect any AI model to 1200+ integrations (MCP, CLI, API) | 43/100 | ★ 3.4k | See repo | 14 Oct 2026 |
| #29 | ctf-skills | Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more | 40/100 | ★ 3.4k | MIT | 13 Sept 2026 |
| #30 | DevOps-Security-Agent-Skills | Agent-ready DevOps, security, infrastructure, and compliance knowledge base with 80+ skills across Kubernetes, Terraform, AWS/Azure/GCP, AI platform o… | 28/100 | ★ 1.2k | MIT | 22 May 2026 |
Source: each project's public GitHub repository (description, stars, license, last push). Listed tools aren't tested or ranked by AgentPick.
How to choose
- Grant the narrowest permissions the server allows.
- Check whether it runs locally or calls a remote service.
- Prefer servers listed in the official MCP registry.
Get the best new agent tools every week. Free, with a verdict on each. Get the weekly digest
Related
AI agent tools for local-first setups →
MCP servers
AI agent tools for knowledge graphs and bases →
MCP servers
AI agent tools for RAG (retrieval-augmented generation) →
MCP servers
AI agent tools for MCP client →
MCP servers
AI agent tools for DevOps →
MCP servers
AI agent tools for Android →
MCP servers
AgentPick Weekly
The week's new agent tools with a verdict on each, every week. Free. We'll email you a link to confirm, and you can unsubscribe any time. See our Privacy Policy.