The Agentic AI & Coding Tools Landscape: 464 Mapped

No-code automation connecting 8,000+ apps with trigger-action workflows. Now bundles AI, data storage, and automation as "AI infrastructure."

Visual scenario builder with branching, iterators, routers, and data transformations. Formerly Integromat.

Self-hostable workflow automation with 400+ integrations and AI workflow builder. Source-available but NOT OSI open source.

Consumer-friendly automation connecting 1,000+ services, strong in IoT/smart home.

Budget-friendly automation with 2,000+ integrations and lifetime deal pricing.

Automation platform with 1,100+ apps and 250,000+ pre-built one-click automations.

Integration platform with 600+ connectors and mid-workflow data enrichment.

Low-code automation combining visual design with code flexibility and AI copilot.

AI-native workflow automation with ~400 MCP servers. Open-core: MIT core, commercial enterprise features.

Self-hosted Zapier alternative with drag-and-drop interface. Community (AGPL) + Enterprise (commercial).

Agent-based system for monitoring, scraping, and acting on your behalf.

Flow-based visual programming on Node.js with huge community node library. Originally from IBM.

Event-driven automation for infrastructure with sensors, triggers, rules, and workflows.

AI automation agency/service (not open-source despite category placement).

Microsoft's automation with deep M365/Azure/Dynamics integration plus desktop RPA flows.

Enterprise automation with 1,200+ connectors, AI-powered recipe building, SOC 2/HIPAA compliance.

Enterprise-scale integration combining iPaaS, embedded iPaaS, and API management.

No-code/low-code platform for business apps, workflows, forms, and dashboards.

No-code workflow automation with OCR data extraction and rules engines for document-heavy processes.

Industry-standard platform for scheduling and monitoring workflows using Python DAGs.

Modern Python-native workflow orchestration -- workflows are Python functions with decorators.

Durable execution platform that makes code survive crashes and failures with built-in retries.

Developer platform combining visual workflow builder with code-first flexibility. Dual AGPL/Apache.

Serverless workflow automation for developers with code steps and 2M free AI tokens/month.

Event-driven orchestration using declarative YAML workflow definitions.

Modern data orchestrator with data assets at center, lineage tracking, and native dbt integration.

Container-native workflow engine for parallel jobs on Kubernetes. 13K+ GitHub stars.

No-code platform for building AI agents ("Lindies") for email, scheduling, document processing, lead gen.

Visual no-code AI workflow builder with drag-and-drop nodes and "Gummie" AI debugging assistant.

Platform for building and managing AI agent workforces with no-code visual interface.

Visual data automation for cleaning, transforming, and automating spreadsheet/data tasks.

Browser-based AI automation running directly in Chrome for web tasks and scraping.

Workflow automation with first-class human-in-the-loop steps and AI+human collaboration.

Enterprise platform for building, testing, deploying, and monitoring AI workflows with evaluation.

No-code intelligent workflow platform built for security teams, replacing legacy SOAR. Community Edition free.

Agentic coding tool that reads codebases, edits files, runs commands, and manages git from terminal. Multi-agent orchestration with subagents.

★ Nathan: What I use to build HAL and the AI system.

General-purpose desktop agent -- "Claude Code for the rest of your work." Reads, edits, and creates files in local folders with full autonomy. Connectors, plugins, and skills for documents, presentations, CRMs, finance, and legal.

Lightweight open-source (Rust) terminal agent. Also available as macOS desktop app (Feb 2026) and IDE extensions.

Open-source terminal agent with Google Search grounding, 1M token context, Jules integration.

Terminal agent with native GitHub ecosystem integration. Public preview since Sept 2025.

Original open-source CLI AI pair programmer. Maps codebases, auto-commits, 100+ languages, any LLM.

Open-source terminal agent with 95K+ stars. 75+ LLM providers, multi-session parallel agents, LSP.

Fully open-source agent from Block. CLI and desktop app with native MCP integration.

Sourcegraph's coding agent with CLI and IDE. "Deep mode" for extended autonomous reasoning.

Terminal AI coding agent built on the Charm ecosystem. LSP-enhanced, MCP-extensible. Converts to MIT after 2 years.

Enterprise CLI with proprietary Context Engine indexing entire codebases, dependencies, and git history.

Enterprise terminal agent with specialized sub-agents: Code, Knowledge, Reliability, Product.

Complete terminal replacement (Rust, GPU-accelerated) with built-in AI agent and multi-agent orchestration.

★ Nathan: My terminal — it integrates well with code.

AI-first IDE (VS Code fork) with full repo awareness, Composer agent mode, MCP integrations.

★ Nathan: A visual way to look at code and markdown files.

AI IDE built around Cascade autonomous multi-file reasoning agent. Memory system, Turbo Mode.

Google's AI IDE (VS Code fork). Editor View and Manager View for orchestrating multiple parallel agents.

AWS's IDE + CLI (Code OSS-based) with "spec-driven development" -- requirements first, code second.

Free AI IDE from ByteDance. Dual Builder/Chat modes, MCP support, multimodal canvas for design mockups.

GPU-accelerated, high-performance editor with native AI integration and multiplayer collaboration.

Open-source AI code editor (VS Code fork) focused on privacy and control. Host your own models locally.

Industry-standard AI pair programmer. Inline suggestions, chat, agent mode, code review, Copilot Workspace.

AWS's AI assistant (formerly CodeWhisperer). Inline suggestions, autonomous tasks, security scanning, 25+ languages.

Enterprise AI coding platform with model flexibility and custom model training. Free tier sunset April 2025.

AI assistant with deep codebase understanding via Sourcegraph's code intelligence. 1M token context. Free/Pro tiers sunset July 2025.

Open-source autonomous agent for VS Code with human-in-the-loop for every action. 5M+ installs.

Agentic AI VS Code extension for planning, writing, and fixing code across multiple files.

Coding agent for VS Code, JetBrains, CLI, Slack. 500+ models, 60+ providers. Memory Bank, Orchestrator mode.

Open-source AI extension for VS Code and JetBrains. Any LLM including local via Ollama. 26K+ stars.

JetBrains' autonomous AI agent. Explores projects, writes code, runs tests, verifies results.

AI coding agent and autocomplete for JetBrains. Plans changes, writes code, creates PRs.

AI-powered code integrity platform focused on test generation and code review. Formerly Codium.

AI code completion with 1M token context window. Created by Tabnine founder. Acquired by Cursor.

AI coding assistant with code search across millions of repos and generous free tier.

First commercial "AI software engineer." Own shell, editor, browser. Used by Goldman Sachs and thousands.

Research-grade open-source agent that takes GitHub issues and automatically fixes them.

Open-source platform for AI software developers. Sandboxed environments. MIT licensed, 188+ contributors.

General-purpose AI agent handling coding, research, and project management. Acquired by Meta for ~$2-3B.

Browser-based AI dev environment. Describe an app, get full-stack project with deployment.

AI app builder turning ideas into full-stack apps. Formerly GPT Engineer. $20M ARR in 2 months.

Vercel's AI UI generation -- natural language to production-ready React/Tailwind components.

Browser IDE with Agent 3 handling complete app lifecycles. 200-minute autonomous runtime.

AI no-code app builder with built-in database, hosting, and auth. 200K+ builders.

Google's async coding agent working in background VMs. Clones code, modifies files, creates PRs.

Autonomous agent turning GitHub Issues into implemented PRs across multiple files.

Open-source personal AI agent running locally. 50+ integrations spanning chat, productivity, smart home, dev workflows.

⛔ Nathan: Wouldn't recommend it.

Enterprise AI assistant using OM1 memory architecture. 40+ enterprise app integrations.

AI coding agent enhancing full SDLC. Auto-repairs code, generates docs/tests, connects to Jira/GitHub/Stripe.

Apple's IDE with native agentic coding support for Claude and Codex agents via MCP.

Developer AI assistant for saving, organizing, and reusing code snippets with AI context.

BYOK AI coding assistant for VS Code, JetBrains, Cursor with customizable agents.

AI company building frontier coding models. Raised $500M+, valued at $12B+. Backed by Nvidia ($1B+).

Lightweight, provider-agnostic framework for multi-agent workflows. Python and TypeScript. Successor to Swarm.

Complete toolset: Agent Builder (visual canvas), ChatKit (embeddable UI), Connector Registry, built-in eval. Beta.

Enterprise platform for deploying/managing agents with shared org context, permissions, governance. Launched Feb 5, 2026.

Build autonomous agents with same infrastructure powering Claude Code. Sandboxed shell and file system.

Open standard for connecting agents to external data/tools. JSON-RPC 2.0. Donated to Linux Foundation Dec 2025.

Code-first framework for multi-agent systems. Bidirectional audio/video streaming. Python and TypeScript.

Managed platform with Agent Engine runtime, Agent Designer (visual canvas), and Agentspace integration.

Enterprise platform putting Gemini, search, and agents in employee hands with centralized governance.

Standardized APIs for agentic apps with Llama models. 25+ launch partners. Not OSI open source.

Dedicated API for enterprise-grade agentic apps with Mistral models. Native MCP integration.

AI agent platform with Agent Studio. Private deployment behind customer firewalls.

Model-driven SDK. Powers production AWS services (Amazon Q, Glue, VPC).

Managed platform with serverless runtime, Gateway, memory, identity, browser, observability.

Most widely adopted agentic AI framework. Chains prompts, tools, memory, models. v1.0. Runs on LangGraph.

Low-level agent orchestration via state graphs. Durable state, persistence, human-in-the-loop. v1.0.

Framework for data-augmented agentic apps. Connects LLMs with external data sources. 35K+ stars.

Role-based multi-agent orchestration where agents collaborate as a structured "crew." 1.3M+ PyPI installs/month.

Merges AutoGen + Semantic Kernel. Python and .NET. Targeting 1.0 GA by end Q1 2026.

Multi-agent conversation framework. 45K+ stars. Now in maintenance mode -- replaced by MS Agent Framework.

AI integration into traditional software (C#, Python, Java). Maintenance mode -- replaced by MS Agent Framework.

Production-grade AI orchestration with Universal Agent component. Serializable pipelines. No vendor lock-in.

AI toolkit for TypeScript. SDK 6 introduces Agent abstraction. Type-safe UI streaming, structured outputs.

Python agent framework with Pydantic-native type safety, durable execution, smooth IDE support.

Lightweight code-centric framework where agents write and execute Python code instead of multi-step prompts.

Program synthesis for reasoning pipelines. Automatically optimizes prompts and workflows.

Multi-agent framework with native multimodal support and 100+ built-in toolkits.

Platform for stateful agents with advanced self-managed memory. Originally MemGPT research.

TypeScript agent framework from the Gatsby team. Recently changed from Apache 2.0. YC-backed.

Open-source conversational AI with NLU and dialogue management. Most mature in category.

Open-source framework for realtime voice, video, and physical AI agents. Built on WebRTC.

Meta-framework bridging multi-agent prototypes to production. Compatible with AutoGen, CrewAI, LangGraph.

Agent integration and auth platform. 250+ external tools with managed authentication.

LLMOps platform: visual workflows, agent framework, RAG, prompt management. 93K+ stars. Multi-tenant SaaS requires permission.

Open-source visual platform for AI agents and LLM orchestration. Self-hostable.

Open-source Python framework for building AI/RAG apps visually. MCP server deployment.

Low-code platform for production-ready AI agents. Open-source core with enterprise features.

Platform for building, testing, deploying AI agents. Strong for voice assistants.

Enterprise AI agent builder. Regulated industries focus. HIPAA compliant. 100+ integrations.

No-code AI platform with 196+ models. Powers 150K+ deployed agents across enterprise and government.

AI toolkit with Notion-like interface for rapidly building and deploying agents.

Enterprise open-source agent infrastructure with multi-agent chains and fallback/decision paths.

AI agents powered by Atlas Reasoning Engine. 6,000 enterprise customers in one quarter ($540M revenue).

Managed platform for building/governing agents across enterprise. Deploy in Teams, SharePoint, M365. GPT-5 powered.

AI agents for ITSM, HR, customer service. AI Agent Orchestrator and Control Tower for governance.

Enterprise platform with 100+ domain agents, 400+ tools, 80+ enterprise app integrations.

No-code agent builder grounded in SAP business processes. MCP support. GA Q1 2026.

Universal protocol for AI agents to connect to external tools, databases, and APIs. Adopted by OpenAI, Google, Microsoft, SAP

Portable skill specifications working across AI platforms. Adopted by OpenAI's ChatGPT and Codex

Standard file for describing agent capabilities. Adopted by 60,000+ open-source projects

Neutral governance body for open, interoperable agentic AI standards. Backed by Google, Microsoft, AWS, Bloomberg, Cloudflare

LLM observability with tracing, prompt management, and evaluation. Self-hostable.

AI observability built on OpenTelemetry. Tracing, evaluation, experimentation. 2.5M+ monthly downloads.

API-level observability as proxy -- one-line integration for logging, cost tracking, caching, rate limiting.

Combined observability + evaluation. Prompt playground, dataset management, production monitoring.

LangChain's tracing and evaluation platform. Deep trace visualization, "Polly" AI debugging assistant.

Enterprise AI observability with hallucination detection and output quality metrics.

Weights & Biases' platform for evaluating, monitoring, and iterating on agentic systems.

Open-source LLM evaluation and observability. End-to-end from prototype to production.

ML/LLM monitoring with data drift detection, quality reports, and test suites.

OpenTelemetry semantic conventions for GenAI tracing. Industry standard for LLM telemetry.

Python gateway supporting 100+ models via unified OpenAI-format API. SDK and proxy modes.

AI gateway with routing rules, fallbacks, load balancing, caching, and observability. Single endpoint.

High-performance LLM gateway in Go. 50x faster than LiteLLM, <100μs overhead at 5K RPS.

Managed service providing multiple LLM providers through single API. Transparent pricing.

Edge-based AI gateway with caching, rate limiting, analytics. 350+ models. Core features free.

Fully managed vector database. Serverless, high performance, hybrid search (vector + keyword).

Vector DB with built-in vectorization modules, hybrid search, GraphQL API.

Vector DB in Rust. High performance, rich filtering, payload support.

Embedding database designed for simplicity. In-memory or persistent.

Vector DB for massive scale. Billion-scale search. GPU-accelerated.

PostgreSQL extension for vector similarity search alongside regular data.

Embedded vector DB on Lance columnar format. Serverless, multi-modal.

Prompt testing and red-teaming. YAML config, LLM-as-judge, CI/CD integration. Endorsed by Anthropic.

Python-first LLM evaluation with 14+ research-backed metrics for prompts, RAG, agents.

Framework specifically for evaluating RAG pipelines. Faithfulness, relevancy, precision metrics.

Real-time AI security. Detects prompt injection, jailbreaks, PII leaks, toxic content. Model-agnostic.

Programmable guardrails. Colang configuration language for custom safety logic.

Toolkit for securing LLM interactions. Modular input/output scanners.

AI agent supervision platform. Runtime monitoring and control of agent actions. Note: different from MITRE Caldera (Apache 2.0, adversary emulation).

Production-ready AI memory. Outperforms OpenAI Memory by 26% accuracy, 91% faster. Graph memory support.

Agent framework with memory as first-class OS concept. Context management, not just storage.

Temporal knowledge graph for agent memory. Tracks entity relationships over time.

LangChain's memory SDK. Three types: semantic (facts), procedural (how-to), episodic (experiences).

Memory Operating System for LLMs. 159% improvement in reasoning tasks in benchmarks.

AI memory engine. Auto-builds knowledge graphs from raw data. 6 lines of code.

Leading graph database with GraphRAG. Knowledge graphs for structured relationship queries.

Graph DB optimized for AI workloads. Low-latency knowledge graph queries.

Developer platform for AI knowledge management. Content ingestion, semantic memory, MCP integration.

Official MCP server registry. Centralized catalog for discovering MCP servers.

Largest MCP marketplace with built-in observability and distribution.

Official interactive tool for testing and debugging MCP servers. Browser and CLI.

Dynamic, reprogrammable MCP server. Discover and install other MCPs from mcp.run.

Agent toolkit connecting to 500+ apps. 18K+ stars, 10K+ pre-built toolkits. MCP-compatible.

Per-request cost tracking, attribution by feature/user, budget alerts. Zero-markup proxy.

Multi-cloud FinOps with dedicated AI cost tracking. MCP integration for querying costs via LLMs.

AI cost optimization with "Optimized AI Keys" auto-routing to cheapest providers.

API for running open-source ML models (image, audio, video, text). Pay-per-use.

Speech-to-text and text-to-speech API. Real-time transcription.

Voice AI -- text-to-speech, voice cloning, voice agents.

Preprocessing unstructured data (PDFs, images, docs) into LLM-ready formats.

Web scraping API optimized for LLM data pipelines. Websites to clean markdown.

Autonomous offensive security -- expert-level pentesting at machine speed without human intervention.

AI-powered API and application security testing discovering business logic flaws.

First comprehensive agentic AI pentesting platform for web apps with human supervision.

AI-powered pentesting toolkit using LLMs as interactive reasoning copilot.

Automated security validation -- full pentesting lifecycle from discovery to exploitation.

AI offensive platform continuously mapping attack surfaces and autonomously exploiting vulns.

AI pentesting MCP framework with 150+ security tools and 12+ autonomous agents.

AI pentesting platform specifically testing AI/ML models against adversarial attacks.

Industry-standard web app scanner now with AI-enhanced vulnerability detection. Community free; Pro/Enterprise paid.

Scanner with 10K+ YAML templates and AI-assisted template generation. Open-source core; cloud paid.

Enterprise vuln management covering 65K+ CVEs with AI module for discovering shadow AI.

Developer-first security covering code/containers/IaC + AI models and agents.

All-in-one DevSecOps combining SAST, DAST, SCA, container scanning with AI prioritisation.

Cloud vulnerability scanner with AI-assisted prioritisation for teams without dedicated security.

BAS platform continuously validating security controls against real-world attack scenarios.

Automated adversary emulation with AI-driven security control validation.

CTEM platform combining BAS, ASM, and automated red teaming with AI optimisation.

BAS simulating attacks across full kill chain with 30K+ scenario playbook.

Adversary emulation platform with AI-assisted campaign construction.

Visual link analysis and OSINT with AI-powered relationship mapping across 100+ sources. Community Edition free.

Automated OSINT from 200+ data sources. Open-source core; SpiderFoot HX cloud paid.

Internet-wide scanning with AI for asset discovery and exposure monitoring.

Search engine for internet-connected devices with ML device fingerprinting.

AI-powered offensive security research accelerating vulnerability research and exploit dev.

Google Project Zero AI that autonomously found real-world zero-day vulnerabilities.

World's first bug bounty platform exclusively for AI/ML. 17K+ researchers, 2,520+ CVEs disclosed.

Leading bug bounty with AI-accelerated triage and researcher matching.

Crowdsourced security with AI matching vulnerability types to specialised researchers.

Industry-leading SIEM with agentic AI Triage Agent and AI Playbook Authoring.

Cloud-native SIEM/SOAR with Copilot for Security for natural-language hunting.

Unified SIEM/SOAR/TI platform with Gemini AI and Mandiant intelligence.

AI-native SIEM with Purple AI for natural-language security analysis.

AI-driven SIEM with best-in-class UEBA for insider threat detection.

AI-driven next-gen SIEM investigating multiple alerts simultaneously.

AI-native SecOps combining SIEM, NDR, Open XDR for MSSPs.

AI assistant across Microsoft security portfolio. NL investigation, autonomous agents for phishing/DLP/identity.

AI-first hyperautomation with Socrates "omni-agent" as autonomous SOC analyst.

Autonomous AI SOC -- 100% alert coverage, 95% triaged in under 2 minutes.

Forensic AI SOC using code-level DNA analysis, endpoint forensics, and reverse engineering.

First AI SOC analyst replicating elite analyst techniques. Deploys in 30 minutes.

Agentic AI SOC Analyst with explainable reasoning. Strong MSSP focus.

Agentic SOC covering full lifecycle from L1 through L3.

AI SOC scaling existing teams with agentic AI.

Industry-leading XDR with Charlotte AI for autonomous cross-platform investigation.

Autonomous EDR/XDR using behavioural AI -- no signatures needed.

AI-driven SecOps unifying SIEM + SOAR + XDR + ASM in single platform.

Self-learning AI detecting novel threats via unsupervised ML -- no rules or signatures.

AI-driven detection with patented Attack Signal Intelligence. 80%+ alert noise reduction.

Unified XDR across endpoints, identity, email, cloud with AI attack disruption.

Behavioural AI detecting sophisticated social engineering and BEC that bypasses traditional filters.

Enterprise email security with Nexus AI for multi-layered threat detection. 99.99% stop rate.

AI email security with transparent, customisable, open detection engine. Core free/self-host; Enterprise paid.

Self-learning NDR creating bespoke "pattern of life" for every device/user.

NDR with Attack Signal Intelligence across network, cloud, and identity.

Cloud-native NDR with real-time SSL/TLS decryption and AI asset discovery.

Open NDR on Zeek with AI-enhanced detection and deep forensic evidence. Zeek OSS free; platform paid.

Agentless CNAPP with security graph + AI CNAPP securing AI workloads in cloud.

Comprehensive CNAPP with AI-driven risk prioritisation and auto-remediation.

Agentless cloud security with GenAI-powered analyst for investigations.

AI cloud security with Offensive Security Engine simulating real attack paths.

AI-powered threat intelligence across open/deep/dark web with predictive capabilities.

Mandiant expertise + Google visibility + Gemini AI analysis.

AI threat intelligence integrated into Falcon with automated attribution.

300+ threat feeds with AI correlation and enrichment.

AI identity security unifying ITDR, PAM, and identity protection.

Agentless identity security extending MFA to any resource including legacy.

AI red teaming toolkit supporting multi-modal adversarial testing.

40+ attack simulations covering OWASP LLM Top 10 + built-in guardrails.

AI security CLI for red-teaming and evaluating LLMs. 127 Fortune 500 customers.

LLM safety tools including CyberSecEval for insecure code detection.

Comprehensive adversarial ML library with 15+ attack categories.

"Nmap for LLMs" -- probes for hallucination, data leakage, prompt injection, jailbreaks.

Fuzzing framework for LLM applications with CI/CD integration.

AI model testing for vulnerabilities, biases, and regressions. OSS library free; Hub enterprise paid.

Scans 35+ ML model formats for malicious code and backdoors. Acquired by Palo Alto Networks.

End-to-end AI security -- supply chain, model scanning, runtime protection. Gartner Cool Vendor.

AI firewall + algorithmic red teaming + model assessment. Formerly Robust Intelligence.

Inference-time protection with AI Model Security Leaderboard. Acquired by F5.

AI governance mapping to EU AI Act, NIST AI RMF, ISO 42001.

OpenAI's chat assistant — the most-used conversational AI. Answers, writes, reasons, browses.

Anthropic's chat assistant — strong reasoning, long context, artifacts.

Google's multimodal chat assistant — huge context, Search-grounded.

xAI's chat assistant, wired into X / real-time data.

Answer engine — cited, search-grounded responses.

Microsoft's chat surface across Windows, Edge and Office; runs OpenAI + in-house models.

Meta's assistant across WhatsApp, Instagram and Facebook; runs open Llama models.

Mistral's chat app — fast, European, backed by their open models.

Quora's multi-model aggregator — chat with GPT, Claude, Gemini and custom bots in one place.

Hugging Face's free web UI for chatting with open-weight models.

Roleplay and persona chat — create and talk to AI characters.

Moonshot AI's long-context chat assistant, hugely popular in China.

ByteDance's assistant — China's most-used consumer chat app.

Baidu's flagship assistant; the Ernie models were open-sourced in 2025.

Meta's open model family — the most-used open weights, long context.

Leading European lab — strong open models plus paid frontier tiers.

Low-cost open reasoning models that matched US frontier quality.

Alibaba's open family — the strongest multilingual open models (200+ languages).

Google's small open models for on-device and edge use.

Microsoft's small, strong models that punch above their size on-device.

OpenAI's open-weight model release.

Enterprise retrieval/RAG models; weights are research-only, commercial use is paid API.

IBM's enterprise, governance-focused open models.

AI21's hybrid Mamba–Transformer models built for very long context.

UAE state-backed open model family.

Allen Institute's fully-open models — weights, data AND training code.

Zhipu AI's open family — a coding leader on SWE-bench.

01.AI's bilingual open model family.

Multimodal open models strong at long-context bulk processing.

Amazon's AWS-native models, served through Bedrock; no standalone consumer app.

Tencent's model family, with select open releases.

Copilot embedded across Word/Excel/Outlook/Teams — drafts, summarises, acts in your Office apps.

Gemini embedded in Gmail/Docs/Sheets/Meet.

On-device assistant across iOS/macOS — on-screen awareness, writing tools, Siri.

OpenAI's agent mode — autonomously browses the web and completes multi-step tasks; Operator is its browser-driving engine.

Google's 24/7 personal AI agent — proactively manages email, calendar and tasks, acts even when your device is off.

Conversational, proactive Alexa — books, buys and controls smart home autonomously.

Self-hosted self-improving personal agent — persistent memory, auto-builds skills, reachable over Telegram/Slack/Discord/WhatsApp.

Daniel Miessler's personal 'Life OS' on Claude Code — layered memory, skills, agent orchestration.

Garry Tan's Claude Code skill pack — role-based slash-commands turning Claude into a virtual eng/business team.

Self-wiring knowledge-graph memory layer for agents — hybrid vector+graph, entity linking, nightly 'dream cycles'.

Lightweight graph-based RAG — dual-layer knowledge-graph + vector retrieval.

Local-first memory storing conversations verbatim in a spatial 'method of loci' hierarchy.

Claude Code plugin for persistent memory — compresses each session, injects relevant context into the next.

Open-source LLM firewall — a self-hosted proxy between your app and OpenAI/Gemini/Claude that blocks prompt injection, redacts PII, and enforces custom policies in real time.

Python library and REST API scanning LLM prompts and responses for injections and jailbreaks — layered YARA signatures, transformer classifiers, and vector-similarity detection. Alpha / research status.

Enterprise GenAI security platform — prompt-injection defence, data-leak prevention, and shadow-AI visibility across employees, applications, and agents.

Edge-layer firewall for LLM applications — discovers AI endpoints and detects prompt injection and PII in requests before they reach your model.

GenAI security platform covering employees, applications, and agents — shadow-AI discovery, DLP for LLM traffic, and jailbreak protection.

Zero-touch GenAI data protection — discovers unapproved AI tools and masks or redacts sensitive data in prompts in real time before it reaches the model.

Agentless, network-level observability of employee AI activity — captures prompts and responses, applies policy, and governs agentic AI at runtime.

Data-lineage platform tracing how sensitive data flows into AI tools — unifies DSPM, DLP, and insider risk into one AI and data security platform.

Cloud-native GenAI DLP stopping sensitive data being pasted or uploaded into AI chatbots across browser, SaaS, and endpoints, plus shadow-AI discovery.

Data-security-first platform (DSPM, classification, blast radius) extended with AI inventory, shadow-AI discovery, posture management, and runtime guardrails.

DSPM for AI — discovers where sensitive data lives across cloud and SaaS and assesses whether and how it can flow into AI tools and workflows.

Data security and governance for Microsoft estates — sensitivity labels, DLP, and Copilot AI usage visibility and controls across Microsoft 365.

SSE platform with GenAI app security — discovers sanctioned and shadow AI apps and enforces real-time, granular usage and data policies inline.

Zero-trust platform with AI asset management — inventories the organisation's AI footprint including AI embedded in SaaS, with inline prompt inspection and DLP.

Agentless browser-extension security turning any browser into a governed workspace — shadow-AI visibility and real-time prompt-level DLP.

Identity-centric SaaS security discovering shadow AI by mapping AI tools and integrations to human and non-human identities across the SaaS estate.

Identity-driven SaaS and AI discovery and governance — finds AI apps via identity and access data, then enforces SSO, offboarding, and access revocation.

AI security posture management in a CNAPP — discovers AI models, pipelines, and shadow AI across clouds, then prioritises misconfigurations via attack-path analysis.

Palo Alto's end-to-end AI security platform — model scanning and posture management plus runtime defence, automated AI red-teaming, and AI agent security.

Dedicated AI governance platform — risk assessments, policy packs, auto-generated model cards, and third-party AI vendor risk management.

Privacy and GRC platform with AI governance — unified AI asset inventory, automated intake, risk assessment and approval workflows, continuous oversight.

Enterprise AI lifecycle governance — bias and drift detection, explainability, and regulatory applicability assessment including the EU AI Act.

Compliance automation with continuous control monitoring and framework support including the EU AI Act and ISO 42001.

Compliance automation for the EU AI Act — automated evidence collection, real-time control monitoring, and cross-framework mapping.

Open-source toolkit of metrics and algorithms to detect and mitigate bias in ML models and datasets across the AI lifecycle.

Open-source Python toolkit to assess and improve fairness of ML models, with mitigation algorithms and disparity dashboards.

Multimodal deepfake detection API and platform scoring video, audio, and images in real time across contact-centre, KYC, hiring, and exec-comms workflows.

Multilayer forensic analysis of video, image, and audio deepfakes via web app, API, and SDK, with sub-second verdicts and KYC liveness integration.

Voice and video fraud detection flagging cloned or synthetic audio in live calls and meetings, built for contact centres and enterprise comms.

Developer-friendly APIs detecting AI-generated or manipulated images, video, and audio at scale, with confidence scores for moderation and fraud pipelines.

Real-time video deepfake detector reading photoplethysmography blood-flow signals in facial pixels to verify a live human on camera in milliseconds.

Content authentication and deepfake forensics protecting enterprises from social engineering, voice scams, and impersonation in high-stakes workflows.

Identity verification platform whose liveness engine flags deepfaked selfies and manipulated media during KYC onboarding worldwide.

Biometric liveness verification providing genuine-presence assurance, blocking presentation attacks and deepfake injection in face-based identity checks.

Automated ID document and face verification with deepfake and synthetic-identity detection built into high-volume onboarding flows.

Synthetic-voice detection for live calls and recorded audio — public basic version plus a higher-accuracy commercial API tier.

Cross-modal deepfake detection API scanning selfies, video, and audio in real time for identity fraud and spoofing.

Digital risk platform combining deepfake and impersonation detection with threat intel, brand monitoring, and dark-web visibility for early warning.

Free deepfake video scanner (web, API, and open-source SDK) analysing uploaded files or URLs for facial manipulation and lip-sync anomalies.

Academic open platform bundling many state-of-the-art detection models for images, video, and audio behind one upload-and-analyse interface.

Two-stage LLM triage (falsifier + red-team pass) of Nuclei JSONL findings via OpenAI-compatible endpoints (vLLM/Ollama).

YAML-driven taskflow agent framework for triaging CodeQL/SAST alerts and filtering false positives.

Code-canary decoys to triage AI-hallucinated ("slop") vulnerability reports flooding bug-bounty programs.

Minimal three-stage LLM pipeline (context → scan → skeptical triage) for zero-day discovery in C/C++.

Generates, tests, and refines Sigma rules from real logs with false-positive checking.

Full-stack AI red-teaming platform covering OpenClaw security scan, agent scan, skills scan, MCP scan, AI-infra vulnerability scan, and LLM jailbreak evaluation.

Security scanner for AI-agent skills used by Claude Code, Codex CLI, Gemini CLI, and similar ecosystems; combines static analysis, AST/YARA/taint checks, optional LLM semantic review, MCP least-privilege/tool-poisoning checks, risk scoring, and SARIF/JSON/Markdown output.

Security scanner for AI agents, MCP servers, and agent skills; the successor path for the original Invariant Labs mcp-scan work.

Security scanner for AI-agent configurations, MCP servers, hooks, and tool permissions with CLI, GitHub Action, and app workflows.

Scanner for agent skills combining YAML + YARA patterns, LLM-as-a-judge, and behavioral dataflow analysis (Codex / Cursor skill formats).

Scanner for MCP servers and agentic tool surfaces, covering tools, prompts, resources, package risk, malware indicators, and deployment readiness.

CLI security scanner for agentic workflows (LangGraph, CrewAI, n8n, etc.) — maps tools/data flows and flags risks.

Security checklist for MCP clients, servers, multi-MCP deployments, lifecycle controls, authz/authn, isolation, and crypto-specific MCP integrations.

Large community cybersecurity skill library for AI agents, mapped to MITRE ATT&CK, NIST CSF, MITRE ATLAS, D3FEND, and NIST AI RMF.

Claude Code / agent-skill bundle for authorized bug hunting and external red-team workflows across web, API, identity, cloud, recon, reporting, Burp MCP, slash commands, and the cbh CLI.

Benchmark environment for prompt-injection attacks and defenses in tool-using LLM agents.

Platform for running MCP servers in isolated containers with per-request identity/access policy, registry and gateway workflows, audit logs, Kubernetes operator support, and observability hooks.

AI-agent firewall and verifiable egress-control layer mediating HTTP, WebSocket, CONNECT, MCP, and A2A traffic to detect prompt injection, secret exfiltration, SSRF, and suspicious outbound actions.

Credential gateway and encrypted vault for AI agents; injects real API credentials at the gateway so agents only see placeholder keys.

Local-first, microVM-backed programmable sandboxes for AI agents with SDKs, CLI, MCP support, and rootless hardware isolation.

Enforcement and evidence layer for agentic deployments: static CodeGuard checks, sandboxing, registry ingestion with SSRF guards, and audit/observability.

Security skill suite for OpenClaw-family agents; AGPL-3.0 licensed.

Flagship machine-learning security library for evaluating and defending models against evasion, poisoning, extraction, and inference attacks across major ML frameworks.

Classic Python toolbox for generating adversarial examples and benchmarking robustness of PyTorch, TensorFlow, and JAX models.

Scans ML model files for unsafe serialization patterns and embedded code, with a focus on model serialization attacks.

Python pickle decompiler, rewriter, and static analyzer for inspecting and detecting malicious pickle/PyTorch payloads.

AI-first security scanner for AI/ML repos, agents, and MCP surfaces; AGPL-3.0 licensed.

OpenAI Gym environment for reinforcement-learning agents that mutate PE malware to evade static ML malware detectors.

Historical "Metasploit for machine learning" framework for experimenting with adversarial robustness of ML models.

CLI for detecting malicious PyPI, npm, Go, RubyGems, GitHub Actions, and VSCode extension packages using Semgrep rules and package-metadata heuristics.

Sandboxed static/dynamic analysis pipeline for open-source packages, capturing filesystem, process, and network behavior and publishing data for malicious-package research.

Fully autonomous multi-agent pentest framework with Docker sandboxing.

Modular, bug-bounty-ready agent framework supporting 300+ LLM models. MIT for research; separate commercial license for production/on-prem.

Autonomous "AI hackers" that dynamically run code and validate vulnerabilities with PoCs (Apache-2.0).

Minimal (~50 LOC) research framework for LLM-driven Linux priv-esc and web pentesting (FSE'23).

AI pentesting CLI assistant with local-LLM support (Llama-3.1, Mistral, DeepSeek).

Official Burp Suite extension exposing Burp to AI clients through MCP.

Offensive-security MCP server with 200+ wrapped tools, specialist agents, and OWASP-oriented probes for authorized testing.

Collection of Claude Code offensive-security subagents for authorized penetration-testing research.

Autonomous AI penetration-testing platform that orchestrates specialized web, AD, Kubernetes, CMS, and framework agents through an MCP-controlled Docker toolbox with local privacy-tokenization for sensitive target data.

Autonomous offensive-security meta-harness that wraps local or API-backed coding agents into a multi-agent recon-to-exploit workflow with MCP/API, War Room UI, tool arsenal, and committed benchmark artifacts.

White-box autonomous AI pentester with strong XBOW-benchmark results. *Shannon Lite is AGPL-3.0; Shannon Pro is commercial.*

Black-box AI pentest framework with MCP, multi-agent spawning, and persistent sessions.

Swarm-intelligence multi-agent pentest with stigmergic blackboard coordination (Go).

LLM offensive-security toolkit.

Learns and ranks regex-like naming patterns from known subdomains to generate likely new candidates.

Convolutional neural network that classifies pentest/recon screenshots (login pages, webapps, old-looking sites, parked domains, and custom 404s) for attack-surface triage.

Machine-learning-assisted web intelligence tool that fingerprints products, versions, CVEs, login pages, debug messages, and related web-server signals from HTTP responses.

AI wrapper around the ffuf web fuzzer that suggests file extensions and paths from the target URL and headers using OpenAI or Anthropic models.

WGAN that learns password distributions from leaks to generate guesses; historical reference implementation of the PassGAN paper (MIT).

DistilBERT text-classification model for email and URL phishing detection, trained on a public Hugging Face phishing-email dataset.

Zero-shot vulnerability discovery in Python repos via LLM call-chain analysis; credited with a 0-day RCE in Ragflow.

Agent-powered security harness for scanning large codebases with coding agents, resumable parallel runs, custom matchers, and optional revalidation.

Official Claude-based semantic SAST GitHub Action that reviews PR diffs.

Neurosymbolic SAST combining LLMs with CodeQL for Java vulnerability detection (MIT).

Agent skills that turn AI coding assistants into a multi-agent SAST scanner.

LLM-driven fuzz-harness generation for OSS-Fuzz; reported 26 real vulnerabilities (incl. CVE-2024-9143 in OpenSSL).

LLM-guided protocol fuzzing extending AFLNet (NDSS'24).

System-prompt hardening fuzzer; 16 attacks × 16 providers.

Automated LLM fuzzer for jailbreaks/prompt injection.

Prompt-injection scanner for custom LLM applications in white-box and black-box modes; GPL-3.0 licensed.

Streamlit app: AI summaries, mindmaps, IOC/TTP extraction, and ATT&CK Navigator layers.

LLM + OCR IOC extraction (pulls IOCs from images/PDFs).

Extracts/aggregates IOCs from feeds; integrates with MISP/ThreatKB (pairs well with LLM post-processing).

Explains imported Windows APIs in PE files via GPT and maps to MITRE ATT&CK.

MCP server (ORKL) for querying the ORKL threat-intel API.

LangGraph SOC automation agent with MCP integrations for Wazuh, Cortex, TheHive, and MISP plus mock-agent test lab.

Open-source AI SOC with readable Python agents, Markdown playbooks, and MCP integrations for triage, investigation, hunting, response, reporting, and forensics.

Agentic SOC platform (LangGraph/Dify) with local-LLM support.

pySigma wrapper and LangChain toolkit for automatic Sigma rule creation and translation; LGPL-2.1 licensed.

LLM-driven incident-response scenario generator using MITRE ATT&CK + ATLAS.

IDA Pro plugin: GPT adds comments and meaningful variable names.

MCP bridge for IDA Pro exposing decompile, disassemble, xref, rename, and debugging workflows to LLM clients.

MCP server exposing Ghidra reverse-engineering ops to any MCP-capable LLM.

Ghidra-focused reverse-engineering assistant with MCP support, Claude Skills integration, and long-form analysis workflows.

Native Ghidra MCP extension with broad tool coverage, headless support, and security-sensitive tool gating.

Ghidra MCP server with large tool coverage, GUI plugin, headless server, and lazy tool loading.

Research project for binary-to-C decompilation with LLMs; code is MIT, but model weights use a more restrictive license.

Burp Suite extension integrating GPT for passive scanning.

Agentic LLM vulnerability scanner and AI red-team kit for jailbreaks, prompt injection, fuzzing, and API stress testing.

Python framework for adding input/output guards, validators, structured-output controls, and Guardrails Hub checks to LLM applications.

LLM monitoring toolkit extracting safety/security signals such as jailbreak similarity, prompt-injection similarity, hallucination checks, PII patterns, toxicity, and refusal metrics.

Archived prompt-injection detector (heuristics + LLM + vector DB + canary tokens).

ML/AI penetration-testing automation tool.

CTFd-based AI red-team training challenges.

Framework for building and testing adversarial jailbreak prompts.

Python framework for adversarial attacks, data augmentation, and training for NLP models; useful for robustness testing beyond chat-only LLM scanners.

Research framework for red-teaming LLMs with auto-generated jailbreak prompts.

ICML 2024 standardized evaluation framework for automated red-teaming and robust-refusal benchmarking.

Canonical Greedy Coordinate Gradient adversarial-suffix attack implementation for transferable attacks on aligned language models.

NeurIPS 2024 open robustness benchmark and leaderboard for generating and defending against LLM jailbreaks.

Original PoC for indirect prompt-injection attacks.

Curated catalog of practical defenses against prompt injection.

Apache-licensed prompt-injection classifier usable via Transformers pipelines and ONNX.

Meta prompt-injection and jailbreak classifier from the Llama Guard family.

Open cybersecurity-tuned LLM family for vulnerability analysis, log/traffic investigation, anomaly detection, attack/defense reasoning, command analysis, and security Q&A.

Defense-focused cybersecurity LLM based on Llama-3.3-70B, trained on an alignment-safe security instruction dataset for SOC, cloud, AppSec, detection, and vulnerability-management workflows.

Cybersecurity-oriented Qwen2.5-Coder fine-tune positioned for offensive and defensive security assistance.

Mistral-7B-Instruct fine-tune for cybersecurity assistance, trained on hand-crafted security and hacking-related instruction pairs.

Low-code honeypot using LLMs to simulate SSH/HTTP/MCP services (Go).

Proof-of-concept LLM-powered SSH honeypot that evaluates sessions as benign, suspicious, or malicious.

LLM-powered SSH honeypot (paper *"LLM in the Shell"*).

Multi-protocol LLM honeypot framework (successor to shelLM).

Cowrie SSH honeypot extended with prompt-injection traps to detect LLM hacker agents.

EnIGMA offensive-CTF mode; SOTA on NYU CTF, InterCode-CTF, and Cybench (v0.7 branch).

Maintained Inspect AI evaluation suite containing multiple cyber benchmarks and tasks.

Deliberately vulnerable LangChain ReAct agent for practicing prompt-injection and Thought/Action/Observation injection attacks.

Claude Code plugin orchestrating recon → vuln classes → reporting.

Real-world AI/ML exploits (Metasploit modules + Nuclei templates) for MLflow, Ray, H2O.

GPT-based discovery of privilege-escalation paths in AWS IAM policies.

Proof-of-concept LLM OSINT framework using knowledge and web agents for internet research workflows.

Curated AI-OSINT dorks, queries, and techniques for discovering exposed LLM and AI infrastructure.

MCP server for dnstwist DNS fuzzing to support typosquatting, phishing, and lookalike-domain analysis.

OpenAI embeddings + Qdrant over OSINT corpora.