Hackagent vs Sublime Security

Side-by-side comparison of features, pricing, and ratings

Analysis reviewed Live tool data as of 2026-10-08
Cross-checked through our multi-step verification ·
Saved

At a glance

DimensionHackagentSublime Security
PricingFree (open-source)Paid (contact for pricing)
Primary FocusAI agent security red-teamingEmail security (BEC, phishing)
Target UserSecurity researchers, developersSecurity teams, SOC analysts
DeploymentCLI/TUI (self-hosted)Cloud (integrated with M365 & Google Workspace)
IntegrationsMultiple agent frameworks (Google ADK, OpenAI SDK, etc.)Microsoft 365, Google Workspace
Latest News2026-07-01: CLI tool for scanning AI agent dependenciesNo recent news captured

For security researchers focused on AI agent red-teaming, Hackagent is a powerful free tool, especially with its recent dependency scanning addition. However, for organizations combating email threats, Sublime Security offers a modern, API-rich platform with low false positives. Choose based on your threat model: agent vs email security.

Hackagent
Hackagent

Free, open-source Python toolkit that red-teams AI agents against prompt injection, jailbreaking, goal hijacking, and tool misuse before attackers find the

Visit Website
Sublime Security
Sublime Security

Agentic email security that auto-triages reported phishing and writes org-specific detections for your SOC.

Visit Website
Pricing
Free
Contact Sales
Plans
$0
$0
Popularity
6 views
7.5k views
Skill Level
Advanced
Advanced
API Available
Platforms
CLIAPI
APIWeb
Categories
🛡️ AI Governance & Guardrails🔐 Application & Code Security
🚨 Threat Detection & SOC
Features
Automated prompt injection testing against AI agents
Jailbreak attack techniques including AdvPrefix, AutoDAN-Turbo, PAIR, and TAP
Goal hijacking and tool misuse evaluation for agentic systems
11 attack techniques including FlipAttack, BoN, h4rm3l, CipherChat, PAP, and Static Template
Pre-built benchmark datasets: AgentHarm, JailbreakBench, HarmBench, AdvBench, StrongREJECT
Additional benchmark presets: BeaverTails, SALAD-Bench, WMDP, AIR-Bench, ToxicChat
Custom dataset import from HuggingFace, URL, or JSON/CSV/JSONL/TXT file
Modular attack engine with separate generator, judge, and target LLM roles
AutoDAN-Turbo summarizer component
Category classifier for organizing attack outcomes
Interactive terminal UI (TUI) with real-time attack progress and visualizations
Report and dashboard output for attack results
Python SDK with autogenerated API reference (hackagent v0.11.0)
CLI dependency scanner for AI agent dependencies (added July 2026)
Runs locally out of the box with optional cloud sync via HACKAGENT_API_KEY
Autonomous Security Analyst (ASA) auto-triages user-reported phishing emails
Autonomous Detection Engineer (ADÉ) authors backtested, org-specific detections
One-click approval before new detections go live
Custom detections written in Sublime Script, a YARA-like language
Full transparency into every decision: matched detections and signal analysis
Behavioral threat hunting interface for proactive investigation
Automated response actions: quarantine, alert, and remediation
Detects BEC and vendor email compromise in real time
Detects credential phishing, callback phishing, QR code phishing, and ICS phishing
Prompt injection and malware/ransomware detection in email
Email DLP for stopping sensitive data loss over email (GA September 30, 2026)
Advanced graymail protection filtering bulk and newsletter noise (public beta July 2026)
Native deployment over Microsoft 365 and Google Workspace mail
Free email analyzer tool plus analyzer API for ad-hoc message scans
API for programmatic access to detections and verdicts
Integrations
Google ADK
OpenAI SDK
LiteLLM
LangChain
Ollama
vLLM
HuggingFace
Microsoft 365
Google Workspace

What real users say: Hackagent vs Sublime Security

Not marketing copy and not our opinion — a structured sweep of public discussion (reviews, forums, communities and video comments), showing what people praise and what they complain about for each tool.

Hackagent

22 mentions across 3 sources · 67% positive (averaged across 3 sources)

Hacker News, YouTube, GitHub

What users praise

  • • Free and open-source with no cost barriers
  • • Eleven attack techniques including AdvPrefix, PAIR, and TAP
  • • Supports multiple agent frameworks: ADK, OpenAI, LangChain, etc.
  • • Integrates pre-built benchmarks like AgentHarm and JailbreakBench

What frustrates them

  • • Early-stage with few stars and limited community
  • • Steep learning curve for configuring multi-LLM roles
  • • Minimal direct user reviews or case studies
  • • Documentation may be sparse for complex setups

Researched Aug 20, 2026

Sublime Security

14 mentions across 2 sources · 76% positive (weighted across 2 sources)

YouTube, Lemmy

What users praise

  • • Transparent, auditable verdicts with matched detections beat black-box scoring in the eyes of security practitioners
  • • Sublime Script's YARA-like syntax means your own detection engineers can read and test rules
  • • ASA auto-triage of user-reported phishing targets the exact backlog SOCs complain about
  • • ADÉ drafts backtested org-specific detections that land for one-click approval

What frustrates them

  • • Public feedback is dominated by YouTube comments — almost no Reddit, HN, or review-site validation
  • • Advanced skill floor means detection-engineering capability is a prerequisite, not a bonus
  • • Sublime Script detections need ongoing tuning that falls on your team to own
  • • No public pricing — every real quote requires a sales conversation

Researched Oct 7, 2026

Who should pick which

  • AI Security Researcher
    Pick: Hackagent

    Hackagent provides open-source tools for red-teaming AI agents with support for latest attack techniques and benchmarks.

  • SOC Analyst
    Pick: Sublime Security

    Sublime offers AI-driven detection of BEC/phishing with low false positives and deep integration with email platforms.

  • Developer Building Agent Frameworks
    Pick: Hackagent

    Hackagent supports multiple agent frameworks (OpenAI SDK, LangChain) for pre-deployment security testing.

  • IT Team in Enterprise
    Pick: Sublime Security

    Sublime provides automated remediation and threat hunting for email security, suitable for large organizations.

  • Penetration Tester (AI)
    Pick: Hackagent

    Hackagent enables authorized adversarial testing of AI agents with customizable goals and attack vectors.

Frequently Asked Questions

Hackagent vs Sublime Security: which should you choose?

For security researchers focused on AI agent red-teaming, Hackagent is a powerful free tool, especially with its recent dependency scanning addition. However, for organizations combating email threats, Sublime Security offers a modern, API-rich platform with low false positives. Choose based on your threat model: agent vs email security.

Is Hackagent suitable for non-technical users?

No, Hackagent requires Python/CLI experience and is designed for security researchers and developers.

Does Sublime Security replace my existing email gateway?

Sublime can complement or replace legacy gateways like Proofpoint, focusing on advanced threats with low false positives.

What attack techniques does Hackagent support?

Hackagent supports AdvPrefix, AutoDAN-Turbo, PAIR, TAP, FlipAttack, BoN, h4rm3l, CipherChat, PAP, and Static Templates.

Can Sublime Security detect BEC attacks?

Yes, Sublime uses AI-powered conversational analysis to detect business email compromise and impersonation.

Does Hackagent require cloud sync?

No, cloud sync is optional via API key; the tool runs locally via CLI.

What integrations does Sublime offer?

Sublime integrates with Microsoft 365 and Google Workspace for email threat detection.

Is Hackagent free for commercial use?

Yes, Hackagent is open-source and free to use for any purpose, including commercial red-teaming with authorization.

Does Sublime Security offer a free trial?

Pricing is contact-only, but a trial may be available upon request; check their website.

More Hackagent or Sublime Security comparisons

Explore each tool further

Browse these categories

Still deciding? Get the weekly AI tools brief

One email a week — new tools, honest comparisons, no spam.

Last reviewed: July 3, 2026