Hackagent vs Sublime Security

Side-by-side comparison of features, pricing, and ratings

Analysis reviewed Live tool data as of 2026-08-23
Cross-checked through our multi-step verification ·
Saved

At a glance

DimensionHackagentSublime Security
PricingFree (open-source)Paid (contact for pricing)
Primary FocusAI agent security red-teamingEmail security (BEC, phishing)
Target UserSecurity researchers, developersSecurity teams, SOC analysts
DeploymentCLI/TUI (self-hosted)Cloud (integrated with M365 & Google Workspace)
IntegrationsMultiple agent frameworks (Google ADK, OpenAI SDK, etc.)Microsoft 365, Google Workspace
Latest News2026-07-01: CLI tool for scanning AI agent dependenciesNo recent news captured

For security researchers focused on AI agent red-teaming, Hackagent is a powerful free tool, especially with its recent dependency scanning addition. However, for organizations combating email threats, Sublime Security offers a modern, API-rich platform with low false positives. Choose based on your threat model: agent vs email security.

Hackagent
Hackagent

Free open-source AI agent security red-teaming toolkit

Visit Website
Sublime Security
Sublime Security

Agentic email security for enterprise BEC and targeted phishing defense

Visit Website
Pricing
Free
Contact Sales
Plans
Popularity
3 views
7.5k views
Skill Level
Advanced
Advanced
API Available
Platforms
CLIAPI
APIWeb
Categories
🛡️ AI Governance & Guardrails🔐 Application & Code Security
🚨 Threat Detection & SOC
Features
Prompt injection attack testing via CLI and SDK
Jailbreaking attacks: AdvPrefix, AutoDAN-Turbo, PAIR, TAP
Goal hijacking and tool misuse evaluation
11 attack techniques including FlipAttack, BoN, h4rm3l, CipherChat, PAP, Static Template
Pre-built benchmark datasets: AgentHarm, JailbreakBench, HarmBench, AdvBench, StrongREJECT
Additional datasets: BeaverTails, SALAD-Bench, WMDP, AIR-Bench, ToxicChat
Custom dataset import from JSON, CSV, JSONL, TXT, or URLs
HuggingFace dataset integration
Modular attack engine with generator, judge, and target LLM roles
Interactive terminal UI (TUI) with real-time progress and visualizations
Optional cloud sync via HACKAGENT_API_KEY
Runs locally out of the box
CLI dependency scanner for AI agents (added July 2026)
Supports multiple agent frameworks: Google ADK, OpenAI SDK, LiteLLM, LangChain, Ollama, vLLM
Python SDK and CLI tool
Autonomous Security Analyst (ASA) for automatic user report triage
Autonomous Detection Engineer (ADÉ) for auto-authoring detection rules
Custom detection rules via Sublime Script (YARA-like language)
Real-time detection of BEC, VEC, credential phishing, callback phishing
Threat hunting interface for proactive investigation
Full transparency with evidence-backed verdicts
Automated incident response (quarantine, alert, remediation)
Low false positive rate via adaptive learning
Integration with Microsoft 365
Integration with Google Workspace
Free EML Analyzer tool for email analysis
API for programmatic access
80% faster user report investigation
Advanced graymail protection (public beta, July 2026)
Integrations
Google ADK
OpenAI SDK
LiteLLM
LangChain
Ollama
vLLM
HuggingFace
Microsoft 365
Google Workspace

What real users say: Hackagent vs Sublime Security

Not marketing copy and not our opinion — a structured sweep of public discussion (reviews, forums, communities and video comments), showing what people praise and what they complain about for each tool.

Hackagent

22 mentions across 3 sources · 67% positive

Hacker News, YouTube, GitHub

What users praise

  • Free and open-source with no cost barriers
  • Eleven attack techniques including AdvPrefix, PAIR, and TAP
  • Supports multiple agent frameworks: ADK, OpenAI, LangChain, etc.
  • Integrates pre-built benchmarks like AgentHarm and JailbreakBench

What frustrates them

  • Early-stage with few stars and limited community
  • Steep learning curve for configuring multi-LLM roles
  • Minimal direct user reviews or case studies
  • Documentation may be sparse for complex setups

Researched Aug 20, 2026

Sublime Security

28 mentions across 2 sources · 38% positive — critical

YouTube, Lemmy

What users praise

  • Transparent, evidence-backed verdicts build analyst trust and aid audits.
  • AI agents automate triage and detection rule authoring, saving time.
  • Low false positive rates (30-70% fewer) reduce alert fatigue.
  • Sublime Script enables precise, custom detections tailored to environment.

What frustrates them

  • Steep learning curve; requires advanced detection engineering skills.
  • Limited community feedback and long-term reliability data available.
  • Proprietary Sublime Script may create vendor lock-in.
  • Pricing not public; contact-based could be expensive for SMBs.

Researched Aug 18, 2026

Who should pick which

  • AI Security Researcher
    Pick: Hackagent

    Hackagent provides open-source tools for red-teaming AI agents with support for latest attack techniques and benchmarks.

  • SOC Analyst
    Pick: Sublime Security

    Sublime offers AI-driven detection of BEC/phishing with low false positives and deep integration with email platforms.

  • Developer Building Agent Frameworks
    Pick: Hackagent

    Hackagent supports multiple agent frameworks (OpenAI SDK, LangChain) for pre-deployment security testing.

  • IT Team in Enterprise
    Pick: Sublime Security

    Sublime provides automated remediation and threat hunting for email security, suitable for large organizations.

  • Penetration Tester (AI)
    Pick: Hackagent

    Hackagent enables authorized adversarial testing of AI agents with customizable goals and attack vectors.

Frequently Asked Questions

Hackagent vs Sublime Security: which should you choose?

For security researchers focused on AI agent red-teaming, Hackagent is a powerful free tool, especially with its recent dependency scanning addition. However, for organizations combating email threats, Sublime Security offers a modern, API-rich platform with low false positives. Choose based on your threat model: agent vs email security.

Is Hackagent suitable for non-technical users?

No, Hackagent requires Python/CLI experience and is designed for security researchers and developers.

Does Sublime Security replace my existing email gateway?

Sublime can complement or replace legacy gateways like Proofpoint, focusing on advanced threats with low false positives.

What attack techniques does Hackagent support?

Hackagent supports AdvPrefix, AutoDAN-Turbo, PAIR, TAP, FlipAttack, BoN, h4rm3l, CipherChat, PAP, and Static Templates.

Can Sublime Security detect BEC attacks?

Yes, Sublime uses AI-powered conversational analysis to detect business email compromise and impersonation.

Does Hackagent require cloud sync?

No, cloud sync is optional via API key; the tool runs locally via CLI.

What integrations does Sublime offer?

Sublime integrates with Microsoft 365 and Google Workspace for email threat detection.

Is Hackagent free for commercial use?

Yes, Hackagent is open-source and free to use for any purpose, including commercial red-teaming with authorization.

Does Sublime Security offer a free trial?

Pricing is contact-only, but a trial may be available upon request; check their website.

More Hackagent or Sublime Security comparisons

Explore each tool further

Browse these categories

Still deciding? Get the weekly AI tools brief

One email a week — new tools, honest comparisons, no spam.

Last reviewed: July 3, 2026