Alternatives to Hex Security

Open-source library of 817 structured cybersecurity skill files your AI coding agent loads on demand, mapped to MITRE ATT&CK and licensed Apache 2.0.

MIT-licensed MCP server for AI-assisted reverse engineering that bridges IDA Pro's database to Claude Code, Cursor and other LLM clients

SILENTCHAIN is a local-first AI pentesting extension for Burp Suite Professional that verifies OWASP Top 10 findings with real payloads.

Open benchmark from OpenAI and Paradigm that tests whether AI agents can detect, patch, and exploit high-severity smart contract vulnerabilities

DeepZero runs parallel Ghidra, Semgrep, and LLM pipelines to hunt zero-days in Windows kernel drivers at corpus scale.

Agentic email security that triages reported phishing and writes backtested Sublime Script detections

Enterprise AppSec platform that scans AI-generated code across source, dependencies, containers and AI assets, with hybrid Checkmarx Fusion detection and

Cloud and AI security platform that connects code, cloud, and runtime into one context graph.

Legit Security: AI-native ASPM that blocks vulnerable AI-generated code before commit

Open-source CLI security scanner that red-teams AI agent prompts, audits MCP servers at runtime, and catches poisoned skill files

MCP gateway and agent security for enterprises, from AI-BOM inventory to inline runtime enforcement.

AI-native red teaming and offensive security platform for security professionals.

Mindgard automates AI red teaming with agent-native reconnaissance and exploit validation for production AI systems

Radiant Security is an agentic AI SOC platform that triages 100% of your security alerts with transparent, auditable reasoning.

Agentic application security that governs AI coding agents and verifies reachable vulnerabilities before code ships

Semgrep combines SAST, SCA, and secrets detection into one PR-based AppSec platform for engineering teams.

Graphite's AI code review agent that comments only on real logic, security, and performance issues in your GitHub pull requests, with one-click fixes.

Apiiro is an agentic AppSec platform that maps code-to-runtime risk and fixes it with AI AutoFix agents.

AI code review and security scanning that reviews every pull request and posts fixes you can commit.

AI-driven defense and intelligence systems for the U.S. national security community, spanning digital targeting, geospatial analysis and disinformation

Agentic SecOps platform that runs AI agents across SOC onboarding, federated search, detection engineering, and investigation on top of the SIEMs and data

Darkmoon runs self-hosted autonomous penetration testing with 50 specialist AI agents and 142 allow-listed security tools

T3MP3ST is an open-source multi-agent offensive-security harness that turns your existing AI coding agent into an autonomous vulnerability

Osmedeus is a declarative YAML orchestration engine for security automation, reconnaissance, and vulnerability scanning workflows.

winfunc runs autonomous AI security agents that audit a codebase, prove exploits with PoCs, and open fix pull requests.

Container Diet is a free MIT CLI that scans Docker images and Dockerfiles for size bloat and hardening gaps, then rewrites the Dockerfile

AI security engineer that finds, verifies, and fixes vulnerabilities in your code and live web apps.

Terracotta AI reviews Terraform and OpenTofu pull requests for security, cost, drift, and blast radius before you merge.

AI services that turn a GitHub repo into documentation, reviews, security checks, performance fixes, and test cases — paid per unit, not per seat.

AI code security scanner that finds vulnerabilities in AI-generated code and fixes them with verified diffs.