AI Security & Penetration Testing Agents Directory (2026)

7AI is an agentic security platform whose AI agents investigate security alerts end to end and show their reasoning. It also offers threat hunting and a managed service run by 7AI's experts.

AI-powered offensive security testing.

Corgea is an application security platform that finds, triages, and fixes vulnerabilities across code, packages, infrastructure, and containers.

Crogl deploys autonomous AI agents that investigate every alert, hunt every advisory, and document every action: using your tools, your data, your environment.

Dropzone AI provides AI agents for the security operations center that investigate alerts end to end and show their reasoning. It also offers an AI Threat Hunter and an AI Threat Intel Analyst.

Replace legacy scanners and manual offensive security processes with AI agents that discover, test, and remediate

Ethiack is agentic AI pentesting that tests continuously and validates exploitability with proof-of-exploit.

Built on a unified data layer and real-time knowledge graph, Exaforce gives security teams the speed, context, and reasoning to stop AI-era threats. Description taken from the vendor's own site.

Hadrian is an agentic offensive security platform that maps external attack surfaces and runs on-demand AI pentests.

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

Intezer AI SOC triages, investigates and responds to security alerts, including low-severity signals. False positives are closed automatically and real threats are escalated for human review or auto-remediation.

Discover, assess and red team AI models, agents and applications with Mindgard’s attacker-aligned AI security solutions. Description taken from the vendor's own site.

NodeZero from Horizon3.ai provides continuous autonomous penetration testing. It chains weaknesses the way an attacker would, safely exploits them, guides remediation and verifies fixes.

Pixee automates vulnerability triage and remediation across existing security scanners. It traces execution paths to prove exploitability and opens fixes that match a codebase's conventions and pass CI.

Prophet Security's AI SOC Platform uses AI SOC agents to automate alert triage, investigations, response, and threat hunting. It connects to existing security stacks through prebuilt integrations.

RunSybil is an AI-powered offensive security platform that continuously tests applications and infrastructure for exploitable weaknesses.

We protect you from AI attacks. Simbian investigates every alert to a verdict, acts in the tools you already own, and gets better every week. Description taken from the vendor's own site.

One Agentic Offensive Security Platform.

XBOW is an autonomous offensive security platform that simulates real attacks to find and validate vulnerabilities in applications. It explores applications and APIs, chains vulnerabilities into working attacks, and reports reproducible exploits.

Instant, agentic security for cloud, hybrid, and on-prem apps. Find and fix exploitable vulns across code, cloud, and runtime. Description taken from the vendor's own site.