AI agent tools for devsecops
Short answer: Our top pick for devsecops: infisical, with the highest AgentPick Score (83/100) among tools tagged "devsecops". Runners-up: xonsh (76) and faraday (72). Compare what each does, its license and how recently it was updated below.
| # | Tool | What it does | Score | Stars | License | Updated |
|---|---|---|---|---|---|---|
| #1 | infisical | Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents. | 83/100 | ★ 30k | See repo | 14 Oct 2026 |
| #2 | xonsh | 🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly. | 76/100 | ★ 9.7k | See repo | 14 Oct 2026 |
| #3 | faraday | Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin … | 72/100 | ★ 6.8k | GPL-3.0 | 6 Oct 2026 |
| #4 | hol-guard | Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runti… | 71/100 | ★ 896 | Apache-2.0 | 14 Oct 2026 |
| #5 | ship-safe | The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic co… | 69/100 | ★ 859 | MIT | 9 Oct 2026 |
| #6 | skylos | Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first tim… | 68/100 | ★ 846 | Apache-2.0 | 14 Oct 2026 |
| #7 | chainloop | Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipeline… | 68/100 | ★ 585 | Apache-2.0 | 14 Oct 2026 |
| #8 | pentest-ai | Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself. | 66/100 | ★ 1.7k | MIT | 9 Oct 2026 |
| #9 | guardana | Open-source AI security verification for model artifacts, live endpoints, MCP servers, and recorded agent traces. Reproducible evidence for release de… | 63/100 | ★ 287 | Apache-2.0 | 14 Oct 2026 |
| #10 | node9-proxy | Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, … | 61/100 | ★ 220 | Apache-2.0 | 14 Oct 2026 |
| #11 | Cybermes | Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orc… | 60/100 | ★ 940 | Apache-2.0 | 2 Oct 2026 |
| #12 | 0 | The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities. | 60/100 | ★ 512 | See repo | 14 Oct 2026 |
| #13 | Anthropic-Cybersecurity-Skills | 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (F… | 58/100 | ★ 34k | Apache-2.0 | 31 Aug 2026 |
| #14 | emisar | Let AI agents investigate and operate infrastructure through declared actions, bounded by policy and host-side checks. Approvals when required, with a… | 58/100 | ★ 337 | See repo | 13 Oct 2026 |
| #15 | Wazuh-MCP-Server | Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, … | 54/100 | ★ 251 | MIT | 9 Oct 2026 |
| #16 | medusa | AI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an alwa… | 48/100 | ★ 1k | AGPL-3.0 | 10 Aug 2026 |
| #17 | cve-mcp-server | Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, Vi… | 47/100 | ★ 1.6k | Apache-2.0 | 1 Oct 2026 |
| #18 | mantis | A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities. | 46/100 | ★ 2.4k | Apache-2.0 | 14 Oct 2026 |
| #19 | numasec | The AI Agent for Cyber Security. | 39/100 | ★ 810 | AGPL-3.0 | 8 May 2026 |
| #20 | agentic-radar | A security scanner for your LLM agentic workflows | 29/100 | ★ 1.1k | Apache-2.0 | 27 Nov 2025 |
Source: each project's public GitHub repository (description, stars, license, last push). Listed tools aren't tested or ranked by AgentPick.
How to choose
- Grant the narrowest permissions the server allows.
- Check whether it runs locally or calls a remote service.
- Prefer servers listed in the official MCP registry.
Get the best new agent tools every week. Free, with a verdict on each. Get the weekly digest
Related
AI agent tools for local-first setups →
MCP servers
AI agent tools for knowledge graphs and bases →
MCP servers
AI agent tools for RAG (retrieval-augmented generation) →
MCP servers
AI agent tools for MCP client →
MCP servers
AI agent tools for cybersecurity →
MCP servers
AI agent tools for DevOps →
MCP servers
AgentPick Weekly
The week's new agent tools with a verdict on each, every week. Free. We'll email you a link to confirm, and you can unsubscribe any time. See our Privacy Policy.