Alternatives to The MCP Census
Compare The MCP Census alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to The MCP Census in 2026. Compare features, ratings, user reviews, pricing, and more from The MCP Census competitors and alternatives in order to make an informed decision for your business.
-
1
General Analysis
General Analysis
General Analysis is an AI security platform that helps security teams adversarially test, monitor, and protect AI agents and systems in production. It is built to help organizations understand AI risk, prevent incidents, and secure real AI deployments across employee copilots, coding agents, customer support agents, healthcare assistants, legal assistants, financial copilots, creative pipelines, and other agentic workflows. It maps AI applications and agents across prompts, retrieval, tools, MCP servers, browser actions, permissions, repositories, cloud accounts, SaaS workflows, and business processes, then generates context-aware attacks that expose system-level risks. Its automated red teaming uses attacker models that adapt to target responses and produce multi-step exploit chains, helping teams uncover vulnerabilities that static prompt sets or endpoint-only tests may miss. -
2
Cortex Agentic Endpoint Security
Palo Alto Networks
Palo Alto Networks Cortex Agentic Endpoint Security (AES) is an AI-native endpoint security platform designed to protect enterprise devices from risks associated with autonomous AI agents and modern software applications. The platform continuously discovers AI agents, local models, browser extensions, IDE plugins, Model Context Protocol (MCP) servers, and other software components operating on endpoints. Its context-aware risk analysis evaluates software dependencies, permissions, behaviors, and potential security exposures to help organizations prioritize threats. Cortex AES provides automated governance policies and security guardrails that control agent interactions and restrict potentially unsafe software. Its real-time prevention capabilities block malicious agent actions, prompt injection attacks, unauthorized data access, and risky software execution before they cause damage. -
3
Pillar Security
Pillar Security
Pillar Security is a unified AI security platform for securing the agentic workforce across the entire AI lifecycle, from development to deployment and runtime protection. It connects business context across discovery, testing, and protection so security intelligence compounds across AI applications, agents, models, prompts, frameworks, tools, MCP servers, skills, coding agents, SaaS, cloud, code, and endpoints. Pillar helps organizations discover and manage AI assets everywhere, including shadow AI and unapproved systems, assess supply chain and posture risks, map agentic attack surfaces, and validate the vulnerabilities that actually matter. Its AI Security Posture Management capabilities analyze connected agents, tools, permissions, data sources, prompts, models, and supply chain components to expose risky paths, policy violations, misconfigurations, coding agent risks, and blast radius when a single component is compromised. -
4
Flint AI
SandboxAQ
Flint AI is a local-first, framework-agnostic AgentOps CLI that helps developers determine whether an AI agent is reliable before it reaches production. One command, flintai scan, analyzes Python source code for security vulnerabilities, misconfigurations, risky tool access, missing guardrails, and quality issues, then uses AI reasoning to triage likely false positives. A second command, flintai eval, sends functional and adversarial prompts to a running agent and scores its responses across more than 35 built-in evaluations, including factual accuracy, instruction adherence, prompt injection resistance, jailbreak resilience, and other runtime behaviors. Each agent receives a reliability score, with findings mapped to OWASP Agentic Security Initiative risks ASI01 through ASI10 and severity scored using CVSS v4.0. Flint AI works with agent frameworks and SDKs including Claude Agents SDK, LangChain, CrewAI, Anthropic SDK, OpenAI SDK, MCP servers, and AutoGen.Starting Price: Free -
5
Enkrypt AI
Anaconda
Enkrypt AI is an agentic AI security and compliance platform designed to protect AI applications, models, agents, and their interactions throughout deployment. The platform combines continuous red teaming, real-time guardrails, monitoring, and policy enforcement to help organizations identify and mitigate AI security, safety, compliance, and brand risks. Enkrypt AI dynamically tests AI systems with use-case-specific attacks to uncover issues such as prompt injection, jailbreaking, data leakage, hallucinations, bias, harmful content, model drift, and unsafe agent actions. Real-time guardrails analyze AI interactions and block threats as they occur while adapting to changing prompts and emerging risks. Its compliance capabilities translate internal policies and external regulations into automated controls while producing evidence that organizations can use for audits and governance. -
6
Mindgard
Mindgard
Mindgard is an automated AI red teaming and offensive security platform purpose-built for AI systems and agents. Built for security and engineering teams accountable for AI in development and production, it continuously red teams models, agents, and applications to find the vulnerabilities most likely to cause a breach, validate whether guardrails and controls hold, and show teams how to close each gap. AI red teaming tests emulate real attacker behavior across prompt injection, jailbreaks, data extraction, poisoning, and agentic tool abuse, and map findings to OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and the EU AI Act. Unlike traditional AppSec tools or manual penetration testing, Mindgard cuts AI risk assessment from weeks to hours, pinpoints and validates defensive gaps, and supports continuous policy compliance as AI systems change. Capabilities: AI Discovery & Recon, AI Red Teaming, AI Assessment, AI Runtime Protection, Model Scanning, AI Governance & Compliance. SOC 2 TypeStarting Price: Contact vendor -
7
AgentScan
AgentScan
AgentScan is a free, deterministic security scanner for AI agent skills. It checks a skill directory (Claude Code, Codex, OpenCode, MCP servers) for prompt injection, secrets, network calls, malware patterns, and obfuscation before you install it. Every finding has file:line evidence and a confidence score. It never runs the skill, never uploads anything, and works offline. Free and open source (MIT); Trust Pack adds 90 pre-audited skills via one command.Starting Price: $59/year -
8
Harden
Harden
Harden AIF is an agent endpoint security platform for AI coding agents. It evaluates supported agent tool calls before execution using the developer’s intent, session context, organisational policy, and the effect of the proposed action. Harden helps protect against destructive commands, unauthorized access, unintended data transfers, secret exposure, privilege misuse, and other unsafe agent actions. Legitimate actions can proceed normally, sensitive data in supported flows can be safely redacted, and actions that fall outside the developer’s intent or authority are blocked before execution. Harden works across popular coding agents and agentic development tools including Claude Code, Codex, Cursor, Antigravity CLI, Kiro, Hermes, and OpenClaw, providing a consistent security layer across the agent ecosystem. -
9
Onyx Security
Onyx Security
Onyx is a secure AI control plane for discovering, protecting, governing, optimizing, and measuring AI agents and models across the enterprise. It gives security, governance, and AI teams visibility into sanctioned and shadow AI across SaaS, cloud, endpoints, and code, including prompts, responses, and agent actions. AI Security helps strengthen posture, identify vulnerabilities, and enforce real-time safeguards against threats and misuse, while AI Governance supports security standards and regulatory requirements with opt-in coverage and policy controls defined in natural language. AI Orchestration reduces friction when setting up agents and MCPs and helps optimize for cost, accuracy, and latency. AI ROI measures adoption, sets goals, and tracks outcomes across departments. The Onyx Guardian Agent acts as a supervisory AI that continuously identifies risks and remediates issues across the platform, helping organizations manage large numbers of agents at scale. -
10
AgentShield
AgentShield
AgentShield is a next-generation identity platform built to verify both human users and AI agents acting on their behalf. It enables organizations to confirm who an agent is, whether the person behind the agent has provided explicit authority, and that the agent is trustworthy, all through APIs and JavaScript integrations. The product includes tools that detect agentic sessions on a website. and enforces identity and permission checks for agent-to-agent or agent-to-service interactions under the open Model Context Protocol Identity (MCP-I) specification. With KYA, businesses can securely manage agent identities and permissions, institute audit-trails, automation workflows, and finely-tuned access control for autonomous systems, thereby protecting themselves from misuse of digital identities and ensuring transparency when AI systems act on behalf of users. -
11
AIM Intelligence
AIM Intelligence
AIM Intelligence is an enterprise AI security platform built to keep AI under control as agents make decisions, call APIs, and take actions across real business systems. It attacks AI before real attackers do and enforces real-time guardrails to keep every agent operating within enterprise policies. Its integrated solutions cover automated AI red teaming, real-time guardrails, and security framework consulting, helping organizations resolve complex AI risks across the full development and production lifecycle. Stinger automates AI vulnerability discovery by generating millions of attack scenarios, supporting end-to-end agentic red teaming beyond prompt-level attacks, testing across text, image, audio, video, and physical AI, and enabling business logic-based custom vulnerability testing. Starfort enforces real-time AI guardrails by detecting and protecting sensitive data such as PII and trade secrets, controlling abnormal API calls from autonomous agents. -
12
Vulnify
Vulnify
Vulnify is runtime authorization for AI agents. Before a sensitive tool call runs, your code calls check() and gets ALLOW, REVIEW or BLOCK, with a 0-100 risk score and the reasons: action, data sensitivity, destination, volume. REVIEW pauses only that action until a person approves. Start in monitor mode, fail closed by default. Policies as code, Node and Python SDKs (MIT) with LangChain, MCP, CrewAI and LangGraph adapters, and a hash-chained audit log with JSON/CSV export. Free plan available.Starting Price: Free plan available -
13
Amplify Security
Amplify Security
Amplify Security created the agentic security harness, a new category of application security built for how software is actually written now, including the surge of AI-generated code. Rather than flagging problems after the fact, Amplify works autonomously inside the CI/CD pipeline to surface and remediate vulnerabilities before they ship. It deploys in the cloud or on-premises and fits existing developer workflows, giving security and engineering teams coverage that keeps pace with modern, high-velocity development. -
14
Pi
Pi Security
Pi is an agentic product security platform that builds institutional security memory so organizations can find, fix, and prevent recurring vulnerabilities without slowing development. It continuously ingests codebases, past incidents, pentest reports, tickets, and other security history into a living inventory, giving the system context about how the organization builds and secures software. When a vulnerability is found, Pi traces it to its architectural root cause, searches for variants across the codebase, and helps close the entire class of issue rather than treating each finding independently. Remediation is generated in the context of the organization’s languages, architecture, and conventions, then delivered directly into developer workflows. What the system learns becomes prevention guardrails that can be applied in IDEs and pull requests during design and coding, blocking known insecure patterns before they reach production. -
15
Tragentics
Tragentics
Tragentics is the AI agent security platform that authenticates every agent, injects keys from an encrypted Credential Vault so agents never hold them, routes every call through a content-blind relay, and records a metadata-only audit trail — across platforms and protocols. Tragentics runs no inference and executes no agent logic. It never reads or stores what your agents say. Every agent gets a permanent ID and an Ed25519 identity, keys are encrypted at rest with AES-256-GCM, and every call is authenticated, rate-limited, and recorded as metadata only — never payloads. Protocol-agnostic: it routes MCP, A2A, ACP, OpenAI, ANP, and DID traffic for the agents you already own.Starting Price: $39/month -
16
Panda Endpoint Protection
WatchGuard
Our endpoint protection stops malware, ransomware, and threats that leverage unknown (zero-day) vulnerabilities using an easy-to-manage cloud-based console and a lightweight agent that doesn’t interfere with the performance of the endpoints. Endpoint protection against malware, ransomware, and the latest threats. Detailed, real-time security monitoring and reporting. Lightweight agent and easy-to-use cloud-based console. Extend security by adding patch management and encryption without a new deployment. This effective, Cloud-native security solution for desktops, laptops, and servers centrally manages the security of endpoints, both inside and outside the corporate network. Our Endpoint Protection (EPP) technologies prevent infections by utilizing our Collective Intelligence, the consolidated and incremental knowledge repository of all applications, binaries, and other files, both trusted and malicious. -
17
Minds
Minds AI Labs, Inc.
Minds is a synthetic market research platform for testing concepts, messages, brands, products, and strategic hypotheses with configurable AI-powered customer panels. Teams can define audiences, generate structured study plans, review them before execution, run qualitative and quantitative research, compare segments, and export evidence for analysis. Minds supports multilingual research, reusable audiences, shared workspaces, secure API access, and a public Model Context Protocol (MCP) server for agent workflows. It is designed for market researchers, insights teams, product teams, brand strategists, agencies, and founders who need fast directional evidence while keeping consequential decisions reviewable and validating high-stakes findings with human research.Starting Price: $0/month, paid from $39/month -
18
Competiflow
Competiflow
Competiflow is a SaaS competitor-monitoring and competitive-intelligence product for product marketers, founders, product and strategy teams, and developers building AI-agent workflows. Add a competitor's homepage and it discovers public pricing, blog, documentation, changelog, and homepage pages to monitor on a schedule. The service extracts structured details such as prices, plan names, features, and post titles, then compares them with prior captures to identify substantive changes. Each change includes severity, a plain-language summary, why it may matter, and before-and-after evidence. Users review changes in a workspace feed or receive scheduled or real-time alerts by email, Slack, or webhook. A REST API and MCP server expose monitoring data and evidence to external tools and AI agents. Plans are based on monthly page checks, with page limits and check frequencies varying by tier.Starting Price: $19/month -
19
SIEM Compliance
NUTRADELIS
SIEM Compliance is a self-hosted security information and event management (SIEM) product for public administrations, their suppliers, and organizations that need security monitoring and audit evidence. It centralizes logs from firewalls, switches, VMware ESXi, Windows and Linux systems, storage, and Cloudflare, with detection rules, incidents and tickets, automation, alerts, reports, and asset inventory. Optional Windows, Linux, and macOS agents collect host inventory and compliance data. The free Community edition includes the full SIEM; paid plans add audit controls for ENS, NIS2, ISO 27001, and eIDAS, evidence mapping, signed auditor evidence packs, and support with an SLA. All plans are unlimited in assets, agents, users, logs, and servers, with no per-agent, per-node, or per-GB fees. The product runs on customer-managed Linux servers, keeping operational data in the customer's infrastructure.Starting Price: €1,490/year -
20
Mountain Theory
Mountain Theory
Mountain Theory is the antivirus for AI. It checks every action an AI agent takes before it runs, against rules written in plain English, then allows it, holds it for a person, or blocks it. No signatures to update. Every decision is logged for your auditor. It works with any AI you already use, from coding agents like Claude Code and OpenAI Codex to models in your own environment or the cloud. When an agent tries to work around a block, the workaround is stopped too. When an agent drifts off the task it was given, that is caught. New bad behavior is stopped the day it appears, with no new rule needed. It keeps personal data from leaving your environment and blocks instructions hidden in emails and documents. Rules are written in plain English, with no code. Every decision is logged for your auditor. It works with any AI you already -
21
Opal Zero
Opal Security
Opal Zero is a just-in-time access governance platform for AI agents that inventories every agent, maps it to an accountable owner, decides each access request, and enforces the decision in the MCP gateway already in place. It gives organizations one inventory across identity providers and AI platforms such as Okta, Entra, Anthropic, OpenAI, Bedrock AgentCore, and Cursor, showing what every agent can access and who owns it. Risk Center surfaces access that is off-purpose, unowned, or standing and routes issues to the appropriate owner with an inline fix. Paladin evaluates requests using policy and context, identifies the least-privileged path, respects owner boundaries, and shows the reasoning behind each decision. Policy Insights uses real agent behavior to identify unused access and opportunities to improve access policy instead of relying on one-off remediation. Gateway Enforcement writes approved decisions as scoped, time-bound policy into existing gateways. -
22
AlertKick
AlertKick
AlertKick combines server security and uptime monitoring in one product. A lightweight eBPF agent for Linux detects intrusions, file changes, rootkits, and SSH activity (login alerts, failed-attempt auto-blocking, maintenance lock), with detections mapped to MITRE ATT&CK and AI triage that attaches a written verdict to each alert. External monitors check HTTP, TCP, and DNS from outside the network, with response-time thresholds, SSL certificate expiry, and domain expiry from live registry RDAP data. Heartbeat monitors catch silent cron and backup failures, and public status pages keep users informed. Alerts flow through escalation policies and on-call rosters to email, Slack, Telegram, WhatsApp, SMS, and phone calls. Server changes are recorded and attributed for compliance evidence, with PCI DSS and SOX reports on Business plans. Setup is a one-line install per server. The free plan includes 10 uptime monitors and heartbeats - no card, commercial use allowed.Starting Price: Free plan; paid from £39/month -
23
Lasso Security
Lasso Security
Lasso is an AI security platform designed to help enterprises securely adopt, govern, and protect AI agents and applications throughout their lifecycle. The platform provides capabilities for AI discovery, risk assessment, automated red teaming, runtime protection, and AI detection and response within a unified solution. Organizations can inventory AI assets, map models and system prompts, monitor policy compliance, and gain visibility into AI usage across the enterprise. Lasso focuses on intent-based security, analyzing the behavior and objectives of AI systems rather than relying solely on traditional rule-based approaches. Its platform helps organizations address risks such as prompt injection, model vulnerabilities, unauthorized AI usage, and evolving threats targeting agentic systems. By combining governance, security monitoring, and proactive protection, Lasso enables enterprises to scale AI adoption while maintaining strong security and compliance standards. -
24
ScanLabsAI
ScanLabsAI
ScanLabsAI is an AI-powered website vulnerability scanner for agencies, MSPs and development teams. It scans against the OWASP Top 10 for Web, API and LLM applications - the last of which most scanners do not cover - and detects leaked AI/LLM provider keys, exposed agentic-tool configuration and GraphQL introspection. Each deep scan runs over 40,000 checks covering CVE detection, SSL/TLS analysis, security headers and DNS. Connected GitHub repositories are scanned for hardcoded secrets and vulnerable dependencies, so problems are caught in source as well as in the deployed site. Findings include AI-written remediation guidance. Scanning is non-intrusive and read-only, completes in under 20 minutes, and reports are never stored. The Agency plan covers 50 client sites for GBP 249/month with white-label PDF reports. The first scan of any website is free. A native MCP server, listed in the official MCP Registry, lets scans run directly from Claude.Starting Price: £9.99; £249/month -
25
TrojAI
TrojAI
TrojAI is an AI security platform that helps organizations deploy and manage AI agents and applications with greater confidence and protection. The platform focuses on identifying vulnerabilities, preventing prompt injection attacks, safeguarding sensitive data, and securing AI behavior across enterprise environments. TrojAI provides both build-time and runtime security solutions that help organizations assess AI models and protect applications from emerging threats. Its technology continuously monitors AI interactions to detect unsafe actions, unauthorized access attempts, and malicious manipulations. The platform supports compliance with leading security frameworks and standards while integrating across different models, cloud providers, and enterprise infrastructures. Designed for enterprise-scale deployments, TrojAI enables organizations to innovate with AI while maintaining strong governance and security controls. -
26
Zenity
Zenity
Enterprise copilots and low-code/no-code development platforms make it easier and faster than ever to create powerful business AI applications and bots. Generative AI makes it easier and faster for users of all technical backgrounds to spur innovation, automate mundane processes, and craft efficient business processes. Similar to the public cloud, AI and low-code platforms secure the underlying infrastructure, but not the resources or data built on top. As thousands of apps, automation, and copilots are built, prompt injection, RAG poisoning, and data leakage risks dramatically increase. Unlike traditional application development, copilots and low-code do not incorporate dedicated time for testing, analyzing, and measuring security. Unlock professional and citizen developers to safely create the things they need while meeting security and compliance standards. We’d love to chat with you about how your team can unleash copilots and low-code development. -
27
Evidence Platform
Root Evidence
Evidence Platform is an evidence-based vulnerability management platform that helps organizations discover their external attack surface, identify the vulnerabilities tied to real financial loss, prove the value of remediation, and back the results with financial protection. Evidence Platform uses the Evidence Graph, a live model of the internet, to map an organization’s public-facing assets before configuration, including infrastructure missed by seed-based discovery tools. It shows why each asset belongs to the organization, tracks new assets from certificate logs and passive DNS, and supports search by technology, ports, certificates, geography, and risk. Evidence Scan checks every asset every 24 hours against the FIRE list, KEVs, and custom CVE lists through external, non-intrusive scanning. FIREs are externally reachable CVEs connected to documented losses in insurance claims, forensic records, reinsurer data, or public disclosures. -
28
Secure Traces
Secure Traces
Secure Traces is an AI-first enterprise technology company focused on agentic AI, healthcare and pharmaceutical modernization, cybersecurity, cloud infrastructure, and enterprise applications. Its services include autonomous AI agents, LLM pipelines, AI governance, 24/7 security operations, threat hunting, secure cloud modernization, Oracle platforms, and operational technology security. The company also develops healthcare, pharmacy, payer, and insurance technology solutions designed for regulated environments. Secure Traces supports HIPAA and GxP-aligned workflows and provides cybersecurity services mapped to frameworks such as MITRE. Its delivery model covers assessment, strategy, implementation, monitoring, response, and continuous optimization across complex enterprise environments. -
29
NVIDIA Open Agent Safety Platform is an open reference design for continuously monitoring and governing AI agent behavior, helping organizations keep agents isolated, observable, auditable, and within defined operational boundaries. It combines runtime governance, continuous threat detection, and hardware-isolated policy enforcement to secure enterprise AI agents from testing through deployment. NVIDIA OpenShell provides an open-source runtime that separates how agents execute from how they reach data, tools, and external systems, using sandboxed execution and deterministic, zero-trust policy enforcement to control what agents can see, do, and interact with. Policies are enforced outside the agent process, helping limit the impact of unexpected behavior. NVIDIA Sentry adds an independent security layer that observes agent requests and responses, establishes verifiable agent identities, continuously governs access to data, tools, APIs, and services, and can quarantine agents.
-
30
IntoDNS.ai
Cobytes B.V.
IntoDNS.ai is a free DNS and email security analysis platform. It runs deterministic checks for DNS, SPF, DKIM, DMARC, DNSSEC, MTA-STS, TLS-RPT, BIMI, SMTP STARTTLS, FCrDNS, blacklist status, and web security headers in one workflow. Public diagnostics are free forever and require no registration or API key for normal use. Results include readable evidence and actionable fix guidance, with AI-assisted explanations where available. Teams can also use report snapshots, scheduled monitoring, a public REST API, CLI, and the official MCP server with 45 tools for AI-agent workflows. IntoDNS.ai is developed and operated by Cobytes B.V. in the Netherlands.Starting Price: Free -
31
AI Security Guard
AI Security Guard
AI Security Guard is a multi-faceted platform for securing autonomous AI, combining a protection SDK, product tooling, education, and original research on the agentic future. - Protection SDK: Integration-friendly API wrapper designed to shield AI agents from jailbreaks, prompt injection, and other harmful content before it reaches your models. - AgentGuard360: Built on the API: Intercepts AI traffic in real time before malicious content reaches your agents. Two-tier content scanning, supply chain protection, and device hardening in one tool. Privacy-first: Content stays local unless you request premium analysis. - Research: Original analysis on the autonomous AI future and the security, privacy, and safety issues that follow, including reports like Shipping the Future. -
32
Akto
Akto
Akto is an open source API security in CI/CD platform. Key features of Akto include: 1. API Discovery 2. API Security Testing 3. Sensitive Data Exposure 4. API Security Posture Management 5. Authentication and Authorization 6. API Security in DevSecOps Akto helps developers and security teams secure APIs in their CI/CD by continuously discovering and testing APIs for vulnerabilities. Akto's pricing is transparent on website. Free tier is available. You can deploy both self-hosted and in cloud. It takes only few mins to deploy and see results. Akto can integrate with multiple traffic sources - Burpsuite, AWS, postman, GCP, gateways, etc. -
33
Cisco AI Defense
Cisco
Cisco AI Defense is a comprehensive security solution designed to enable enterprises to safely develop, deploy, and utilize AI applications. It addresses critical security challenges such as shadow AI—unauthorized use of third-party generative AI apps—and application security by providing full visibility into AI assets and enforcing controls to prevent data leakage and mitigate threats. Key components include AI Access, which offers control over third-party AI applications; AI Model and Application Validation, which conducts automated vulnerability assessments; AI Runtime Protection, which implements real-time guardrails against adversarial attacks; and AI Cloud Visibility, which inventories AI models and data sources across distributed environments. Leveraging Cisco's network-layer visibility and continuous threat intelligence updates, AI Defense ensures robust protection against evolving AI-related risks. -
34
Titania Nipper
Titania
Analyzing configurations with the precision and know-how of a pentester, Nipper is a must have on-demand solution for configuration management, compliance and control. Network risk owners use Nipper to shut down known pathways that could allow threat actors to alter network configurations and scale attacks. Whilst assessors use Nipper to reduce audit times by up to 80% with pass/fail evidence of compliance with military, federal and industry regulations. Providing complementary analysis to server-centric vulnerability management solutions, Nipper’s advanced network contextualization suppresses irrelevant findings, prioritizes risks by criticality, and automates device-specific guidance on how to fix misconfigurations. -
35
Snapper
Snapper
Snapper is an AI agent security platform designed to provide end-to-end governance and protection for organizations deploying AI agents across applications, networks, and systems. It delivers runtime enforcement by evaluating every agent action, including tool calls, API requests, and data access, before execution through a policy-driven rule engine with multiple enforcement layers. It offers unified visibility into AI usage by monitoring network traffic, browser activity, DNS, and processes to detect unauthorized tools and “shadow AI,” while also intercepting outbound LLM requests through SDK wrappers and a network proxy to evaluate, redact, and log sensitive data in real time. Snapper includes advanced threat detection capabilities that identify prompt injection, exploit chains, anomalous behavior, and multi-step attack patterns using behavioral baselines, kill chain tracking, and composite trust scoring. -
36
Noma
Noma Security
Noma Security is the complete enterprise AI security platform designed to deliver confidence in agentic AI at scale. Noma Security was named a Gartner Cool Vendors in AI Security, 2025 for delivering deep visibility and AI discovery, agentic risk mapping, security posture management, automated AI red teaming, and AI runtime protection all in one platform. With seamless integration to your AI stack and workflows, and alignment with regulatory compliance frameworks, Noma Security helps teams embrace AI innovation while addressing the unique threats posed by rapid enterprise AI adoption. -
37
SIMS Personnel
Education Software Solutions
SIMS Personnel stores a wide range of information, allowing you to build a complete picture of every staff member in your school. Collate information including personal details, absences, training, qualifications, checks, contracts and service agreements. SIMS Personnel with Staff Performance goes one step further, providing your school with a flexible and secure way to manage, monitor and analyze staff performance electronically. From individual objectives, lesson observations, employee reviews, to development, all your staff performance data is held centrally, securely and integrated with the personnel record. All data required for the school workforce census is pulled through in a simple and easy process, saving you time on administration. With staff data held centrally in one secure location, your leadership team can provide evidence that they are proactively monitoring and managing performance throughout the school. -
38
CyCraft XecGuard
CyCraft
XecGuard is CyCraft’s LLM Firewall for trustworthy, agentic AI, designed to protect enterprise AI systems from prompt injection, jailbreak, prompt extraction, data leakage, unsafe outputs, and agentic workflow risks. Built on CyCraft’s red teaming and blue teaming experience across government, finance, and high-tech manufacturing, XecGuard goes beyond model-level defenses by combining AI guardrails, cybersecurity controls, compliance protection, and risk response strategies for real-world enterprise AI adoption. It is positioned as a plug-and-play LoRA security module that can strengthen LLM defenses without requiring changes to the underlying model architecture, helping teams add protection quickly while preserving performance. XecGuard is built on proprietary security datasets and multi-stage fine-tuning techniques, enabling LLMs to better resist adversarial prompts, malicious manipulation, and attempts to extract protected instructions or sensitive information. -
39
CloudEagle.ai
CloudEagle.ai
CloudEagle.ai is an AI-powered SaaS Management, AI Governance, and SaaS Security platform that gives enterprises one command center to discover, secure, govern, and optimize their entire SaaS and AI stack, including AI usage control and both human and non-human identities. CloudEagle governs applications, identities, and non-human identities (service accounts, bots, API keys, AI agents) continuously, rationalizing redundant tools and tracking security posture against frameworks like NIST 800. Onboarding takes 30 minutes; savings and governance start day one. To date: $50B+ in spend processed, $3B+ saved. With 500+ integrations, CloudEagle eliminates shadow SaaS and AI, enforces AI usage policies, and secures non-human identities. Slack-enabled, no-code workflows automate onboarding/offboarding, access reviews, license harvesting, and just-in-time access, while an autonomous agent triggers renewals and routes approvals through Slack, Jira, or ServiceNow.Starting Price: $2000/month -
40
WatchGuard Endpoint Protection Platform (EPP)
WatchGuard Technologies
The WatchGuard EPP product goes beyond signature-based antivirus to stop malware, ransomware and threats that leverage unknown, zero day vulnerabilities. Even better, it's managed with an intuitive Cloud-based console and lightweight agent that doesn't interfere with endpoint performance. Endpoints are protected from viruses, malware, spyware and phishing with WatchGuard EPP. We use a comprehensive set of security techniques including signatures, local cache, and even our own proprietary intelligence feeds derived from the malware previously detected with our EDR products. This enables us to find zero day exploits using behavioral heuristics and known indicators of attacks as “contextual rules." WatchGuard EPP centralizes next-generation antivirus for all your Windows, macOS and Linux desktops, laptops, and servers, in addition to the leading virtualization systems. -
41
Gate22
ACI.dev
Gate22 is an enterprise-grade AI governance and MCP (Model Context Protocol) control platform that centralizes, secures, and observes how AI tools and agents access and use MCP servers across an organization. It lets administrators onboard, configure, and manage both external and internal MCP servers with fine-grained, function-level permissions, team-based access control, and role-based policies so that only approved tools and functions can be used by specific teams or users. Gate22 provides a unified MCP endpoint that bundles multiple MCP servers into a simplified interface with just two core functions, so developers and AI clients consume fewer tokens and avoid context overload while maintaining high accuracy and security. The admin view offers a governance dashboard to monitor usage patterns, maintain compliance, and enforce least-privilege access, while the member view gives streamlined, secure access to authorized MCP bundles.Starting Price: Free -
42
Credo AI
Credo AI
Standardize your AI governance efforts across diverse stakeholders, ensure regulatory readiness of your governance processes, and measure and manage your AI risks and compliance. Go from fragmented teams and processes to a centralized repository of trusted governance that makes it easy to ensure all of your AI/ML projects are being governed effectively. Stay up-to-date with the latest regulations and standards with AI Policy Packs that meet current and emerging regulations. Credo AI is an intelligence layer that sits on top of your AI infrastructure and translates technical artifacts into actionable risk & compliance insights for product leaders, data scientists, and governance teams. Credo AI is an intelligence layer that sits on top of your technical and business infrastructure and translates technical artifacts into risk and compliance scores. -
43
Protect AI
Palo Alto Networks
Protect AI performs security scans on your ML lifecycle and helps you deliver secure and compliant ML models and AI applications. Enterprises must understand the unique threat surface of their AI & ML systems across the lifecycle and quickly remediate to eliminate risks. Our products provide threat visibility, security testing, and remediation. Jupyter Notebooks are a powerful tool for data scientists to explore data, create models, evaluate experiments, and share results with their peers. The notebooks contain live code, visualizations, data, and text. They introduce security risks and current cybersecurity solutions do not work to evaluate them. NB Defense is free to use, it quickly scans a single notebook or a repository of notebooks for common security issues, identifies problems, and guides your remediation. -
44
Decripte
Decripte
Decripte is an AI-native cybersecurity and incident-response platform for end-to-end detection, investigation, containment, eradication and recovery. It connects endpoint, cloud, server and infrastructure evidence in a governed response workflow, combining specialized AI automation with expert 24/7 human oversight. The platform includes threat management, incident planning, case coordination, evidence handling, reports and guided response actions.Starting Price: $0 free plan -
45
F5 AI Guardrails is a runtime AI security solution designed to protect AI models, applications, agents, and connected data throughout deployment and operation. The platform helps organizations defend against adversarial threats such as prompt injection, jailbreak attacks, harmful outputs, and unauthorized AI behavior. It provides real-time monitoring and enforcement of security policies to prevent data leakage, compliance violations, and misuse of AI systems. Organizations can implement predefined guardrails or create customized policies tailored to specific business requirements and AI use cases. The platform also delivers observability, auditing, and governance capabilities that help organizations maintain visibility into AI interactions and regulatory compliance. By combining threat protection, data security, and AI governance, F5 AI Guardrails helps enterprises operate AI systems more safely and responsibly.
-
46
friendly4AI
friendly4AI
friendly4AI is a GEO Scanner — a SaaS platform that measures how AI-ready and AI-visible a website is. It analyzes any URL against 40+ GEO/AEO parameters covering crawlability, structured data, content accessibility, AI discoverability (llms txt, AI manifests), technical signals, and API integration, then produces two scores from a single scan: an AI-Readiness Score (whether AI systems can crawl, parse, and understand the site — available in a free scan, no account required) and an AI Visibility Score (whether ChatGPT, Gemini, Claude, and Perplexity actually know and recommend the site, via live LLM queries). Every finding is backed by verifiable evidence with recommendations prioritized by impact (Critical/High/Medium/Low). Additional features include a public leaderboard (Top Friendly4AI) and a native MCP server for AI agents. Pricing: free scan, then Starter $9/mo, Pro $39/mo, Teams $199/mo, with a free trial.Starting Price: $9/month -
47
Penligent
Penligent.ai
Penligent is an agentic AI penetration testing platform for authorized security testing. It helps security teams test web applications, APIs, business logic, and AI agents through an evidence-driven workflow. Users can define a target, choose a testing type, and let AI agents plan tasks, orchestrate security tools, analyze results, validate vulnerabilities, and generate editable reports. Penligent is built for security engineers, red teams, penetration testers, bug bounty hunters, consultants, and organizations that need faster, repeatable, and structured security assessments.Starting Price: $49.90/month -
48
procuris
procuris by JMP UG (Haftungsbeschränkt)
procuris helps companies that bid for public contracts submit more of the right bids with the team they already have. Search agents match new tenders from Germany and the EU against a company's portfolio, regions and typical contract size, so bid teams start with a prioritised shortlist. Before effort is spent, procuris checks requirements, eligibility and deadlines against the company profile, separates exclusion from award criteria and shows gaps in the required evidence. The bid/no-bid decision is recorded with its reasons. AI agents then prepare concepts, forms and evidence from the company's references, certificates and templates. Answers to questions on the tender documents link to the exact passage. Tasks, deadlines, reviews and sign-offs stay with each bid, and the team keeps the final decision. Searching is free, paid plans start at EUR 149 per month. Hosted in Germany in ISO 27001 certified data centres, GDPR compliant, on-premise on request.Starting Price: €0 -
49
ApacheBooster
NdimensionZ
ApacheBooster has been specifically designed to enhance the working of web servers based on cPanel. ApacheBooster as the name suggests boosts the working ability of the Apache web server, which is according to the census the most used web server in the world! Nginx and varnish has been fused together in ApacheBooster to make it effectively efficient in its working. Nginx is a super quality high performing web server software that speeds up the working of the web server. The best feature of Nginx is that it is very fast in its working i.e in retrieving static files and also helps in saving memory by using less memory for processing of concurrent requests. It is very efficient in handling traffic requests. With the less amount of memory used, it is capable of handling more requests/clients when compared to Apache. Nginx is a reverse proxy server of open source type that smartly balances the load, a web server and web cache (also known as HTTP cache). -
50
PeriWatch Surveillance
PeriGen
PeriWatch Surveillance is an advanced fetal surveillance and documentation system that incorporates the only automated maternal-fetal early warning system commercially available in the United States. The system features near real-time analytical tools and scalable workflows to help labor and delivery teams improve productivity and efficiency, standardize communication, and make informed decisions. Central surveillance and patient census capabilities allow monitoring of up to 30 patients on one screen, with easy configuration as the census changes. This includes trending through each tracing independently and color-coded early warning notifications embedded within the system. The patient census provides a comprehensive view of all active patients, configurable columns and colors, and is HIPAA compliant. Bedside surveillance offers ease of trending and navigation to documentation fields, with a natural flow of documentation screens designed with clinical preferences in mind.
