// Identity, secrets & agent security
Guard secrets & permissions
Auth, secret management, prompt-injection defence and agent security scanning.
39 tools34 open sourcechecked 2026-10-22Compare side by side →
How to choose · start with these three
- · Secrets belong in a manager (Infisical, Vault), not in .env files agents can read
- · Scan before commit: gitleaks, trufflehog
39 / 39 items
infisical v0.167.0 ★ 30k Infisical is the open-source platform for secrets, certificates, and privileged access management. Open source APICLI gitleaks v8.30.1 ★ 30k Find secrets with Gitleaks 🔑 Open source CLI vault v2.1.2 ★ 36k A tool for secrets management, encryption as a service, and privileged access management Open source APICLI shannon ★ 49k Autonomous white-box AI pentester for web apps and APIs. Open source local destructive_command_guard ★ 6.2k Blocks dangerous git and shell commands from agents. Open source CLI hexstrike-ai ★ 13k MCP server letting AI agents use pentesting tools. Open source MCP SkillSpector ★ 21k Security scanner for AI agent skills. Open source CLI codex-security ★ 11k Codex Security CLI and SDK for finding, validating and fixing vulnerabilities. Open source CLISDK agent-governance-toolkit ★ 6.4k AI Agent Governance Toolkit — policy, zero-trust identity, sandboxing. Open source SDK deepsec ★ 8.2k Security harness for finding vulnerabilities with coding agents. Open source CLI AI-Infra-Guard ★ 6.9k Full-stack AI red-teaming platform securing AI ecosystems. Open source platform Decepticon ★ 4.8k Autonomous hacking agent for red team. Open source local tracecat ★ 3.8k Open-source security automation platform for teams and AI agents. Open source server agent-scan ★ 3.2k Security scanner for AI agents, MCP servers and agent skills. Open source CLI strix ★ 71k Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. Open source trivy v0.75.0 ★ 38k Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more Open source CLI keycloak 26.8.0 ★ 37k Open Source Identity and Access Management For Modern Applications and Services Open source API better-auth v1.7.7 ★ 30k The most comprehensive authentication framework Open source SDK trufflehog v3.99.2 ★ 28k Find, verify, and analyze leaked credentials Open source CLI sops v3.13.3 ★ 23k Simple and flexible tool for managing secrets Open source CLI semgrep v1.180.0 ★ 17k Lightweight static analysis for many languages. Find bug variants with patterns that look like source code. Open source CLIMCP logto v1.44.0 ★ 15k 🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC. Open source API casdoor v4.23.0 ★ 15k An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD Open source API kratos v26.2.0 ★ 14k Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network. Open source API grype v0.120.1 ★ 13k A vulnerability scanner for container images and filesystems Open source CLI opa v1.21.1 ★ 12k Open Policy Agent (OPA) is an open source, general-purpose policy engine. Open source APICLI syft v1.54.1 ★ 9.6k CLI tool and library for generating a Software Bill of Materials from container images and filesystems Open source CLI garak v0.17.0 ★ 9.6k the LLM vulnerability scanner Open source CLI openbao v2.7.1 ★ 8.4k OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. Open source APICLI guardrails-ai/guardrails v0.11.0 ★ 7.6k Adding guardrails to large language models. Open source SDK NVIDIA-NeMo/Guardrails v0.24.1 ★ 7.3k NeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems. Open source SDK openfga v1.22.0 ★ 5.9k A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. Open source API PurpleLlama ★ 4.4k Set of tools to assess and improve LLM security. Open source SDK GitGuardian Closed / commercial Lakera Closed / commercial Microsoft Entra Agent ID Closed / commercial Okta for AI Agents Closed / commercial Prisma AIRS (Palo Alto) Closed / commercial llm-guard v0.3.16 ★ 3.2k The Security Toolkit for LLM Interactions Open source SDK Archived
About this data
- Default order is “recommended”: editorial picks first, then by popularity; general-purpose developer software and archived projects are listed last.
- Data checked 2026-10-22. Official links only. JSON API