Alternatives to Endor Labs

Snyk scans AI-written code, governs coding agents, and pentests AI apps before they ship.

Poolside builds open-weight agentic coding models — Laguna XS 2.1 (33B) and Laguna S 2.1 (118B) — for code that stays inside your security

Agentic development security platform that puts guardrails around AI-written code and remediates findings with agents

AI security engineer that finds, verifies, and fixes vulnerabilities in your code and live web apps.

Agentic AI code review with a governance layer that enforces your team's coding rules on every pull request

Apiiro is an agentic AppSec platform that maps code-to-runtime risk and fixes it with AI AutoFix agents.

Legit Security: AI-native ASPM that blocks vulnerable AI-generated code before commit

winfunc runs autonomous AI security agents that audit a codebase, prove exploits with PoCs, and open fix pull requests.

Agents Shipgate returns a deterministic merge verdict on AI-generated agent PRs before the code lands.

AI code security scanner that finds vulnerabilities in AI-generated code and fixes them with verified diffs.

AI code auditor that scans AI-generated snippets for hallucinated imports, security flaws and logic errors before you commit them.

Amazon CodeWhisperer is now Amazon Q Developer — an AI coding assistant with AWS expertise, built into your IDE and CLI

Agent enablement platform that versions, scans and evaluates the skills your coding agents run.

Pixee is agentic vulnerability remediation that proves which scanner findings are exploitable, then ships convention-aware fixes as pull

AI code review that validates, prioritizes, and secures every pull request your team ships.

Graphite's AI code review agent that comments only on real logic, security, and performance issues in your GitHub pull requests, with one-click fixes.

Cloud and AI security platform that connects code, cloud, and runtime into one context graph.

AI code review and security scanning that reviews every pull request and posts fixes you can commit.

Self-hosted cloud development environments and AI governance that let enterprises run coding agents on their own infrastructure.

Open-source library of 817 structured cybersecurity skill files your AI coding agent loads on demand, mapped to MITRE ATT&CK and licensed Apache 2.0.

UmaDev is an open-source Rust CLI that turns your logged-in local coding agents into an eight-role AI dev team with governance gates and

An MIT-licensed orchestrator TUI that supervises headless Claude Code agents through a gated plan → ADR/PRD → issues → TDD → e2e delivery pipeline

Open-source meta-harness that runs Claude Code, Codex, Pi and your own agents under one policy, sandbox and cost layer

Skylos is an open-source CLI and PR check that catches dead code, secrets, and AI agent shortcuts before they merge.

HackerAI is a conversational AI penetration-testing assistant that finds and fixes code vulnerabilities through chat.

LeanCTX is a local MCP context gateway that filters and compresses what your AI coding agent reads before the request leaves your machine.

BotCity governs the Python scripts and AI agents running on your endpoints and in your pipelines

Meta Kim: an open-source AI coding governance framework for auditable Claude Code, Codex and Cursor work

Open benchmark from OpenAI and Paradigm that tests whether AI agents can detect, patch, and exploit high-severity smart contract vulnerabilities

Terracotta AI reviews Terraform and OpenTofu pull requests for security, cost, drift, and blast radius before you merge.