Find the right AI tools for any job, task or industry.TASK
Secure software & systems
Identify software risks and support security review. ToolGrail lists 57 AI tools for this task, including PasteGuard, Snyk Code, CrowdStrike Charlotte AI and Darktrace.
Tools for this task
| Tool | What it does | Pricing | Type | Evidence |
|---|---|---|---|---|
| PasteGuardPasteGuard | Open-source, self-hosted tool that masks names, emails and secrets before they reach AI providers. | Open source | Tool | Source reviewed |
| Snyk CodeSnyk | Scan source code for vulnerabilities, explain findings, and suggest fixes inside developer workflows. | Free + paid | Tool + MCP | Source reviewed |
| CrowdStrike Charlotte AICrowdStrike | Generative AI analyst inside the CrowdStrike Falcon platform. | Pricing not verified | Tool | Site checked |
| DarktraceDarktrace | Self-learning AI for threat detection and response. | Pricing not verified | Tool | Site checked |
| HiddenContentNot verified | Check a document for hidden text before your agent reads it. PDF, Office, RTF, HTML. | Pricing not verified | MCP | Site checked |
| PII ShieldNot verified | Redact names, IDs, emails, phones and card numbers before they reach the model; restore them after. | Pricing not verified | MCP | Site checked |
| Share by DeltaBreenNot verified | Send encrypted files and secrets, collect files and get documents signed, from your AI. | Pricing not verified | Tool + MCP | Site checked |
| Shield KYAShield Agent AI | Records and gates the tool calls of AI coding agents such as Claude Code, Cursor and Codex. | Free + paid | Tool + MCP | Source reviewed |
| AutoPilot ITNot verified | Small-business IT monitoring and Windows device security. | Pricing not verified | Tool + MCP | Site checked |
| BewaryNot verified | Threat intelligence for AI agents: checks URLs, domains, phones, emails, wallets and IBANs for scams. | Pricing not verified | Tool + MCP | Site checked |
| BlackVeilNot verified | DNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits. | Pricing not verified | Tool + MCP | Site checked |
| CaspianNot verified | See and manage your company's apps, access, devices and spend from your AI assistant. | Pricing not verified | Tool + MCP | Site checked |
| Chainsaw package firewallNot verified | Package firewall for agents: route npm, pip and docker installs through Chainsaw. | Pricing not verified | Tool + MCP | Site checked |
| Cogent SecurityNot verified | AI agents that investigate and resolve vulnerabilities across an organisation. | Pricing not verified | Tool | Site checked |
| ContextNot verified | OSINT investigations with traceable evidence: domains, URLs, IPs, scams and business records. | Pricing not verified | MCP | Site checked |
| ContextGateNot verified | MCP gateway: one connection for your AI apps, with tool policies, PII redaction and audit logs. | Pricing not verified | Tool + MCP | Site checked |
| DechonetNot verified | 30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots. | Pricing not verified | Tool + MCP | Site checked |
| DeltabridgeNot verified | Cyber threat intelligence: threat actors, malware, CVEs, IOCs, ATT&CK and analyst briefs. | Pricing not verified | Tool + MCP | Site checked |
| DMARKOFFNot verified | DMARC analytics for AI assistants: SPF/DKIM, compliance, anomalies, p=reject readiness, onboarding. | Pricing not verified | Tool + MCP | Site checked |
| dns-doctorNot verified | Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes. | Pricing not verified | Tool + MCP | Site checked |
| DNSaiNot verified | DNS, email-security and website intelligence for your domains: SPF/DKIM/DMARC, changes, subdomains. | Pricing not verified | Tool + MCP | Site checked |
| ExepalNot verified | Safety tools for AI agents: safe page reader, prompt-injection, secrets, PII and MCP server scans. | Pricing not verified | Tool + MCP | Site checked |
| GuardCueNot verified | Checks a site built with AI tools for security problems and gives the fix in plain English. | Pricing not verified | Tool + MCP | Site checked |
| HacktronNot verified | AI security platform for continuous red teaming, pull request security review and white-box pentests. | Pricing not verified | Tool | Site checked |
| HostSherlockNot verified | Check SPF, DKIM, DMARC and MX of any domain, and read the DMARC reports of domains you monitor. | Pricing not verified | Tool + MCP | Site checked |
| isIPsafeNot verified | Check whether an IP address or network is malicious and report abusive IPs to isIPsafe. | Pricing not verified | Tool + MCP | Site checked |
| mcpbizappsNot verified | Governed MCP gateway for business apps: roles, previews, approvals and one audit log. | Pricing not verified | Tool + MCP | Site checked |
| mcpprobeNot verified | Read-only MCP security data: check catalogue, public scan status and your own scan reports. | Pricing not verified | Tool + MCP | Site checked |
| MCPVetterNot verified | Audit your MCP servers for poisoned tools and leaked secrets, and check AI-generated code for flaws. | Pricing not verified | Tool + MCP | Site checked |
| My IP HelpNot verified | IP geolocation, ASN and a 0-100 risk score (VPN, proxy, Tor, datacenter) for any IP address. | Pricing not verified | Tool + MCP | Site checked |
| Namiq LatticeNot verified | CVE, KEV, MITRE ATT&CK, CWE and detection graph for AI agents; every link names its source. | Pricing not verified | MCP | Site checked |
| PatchLabsNot verified | Security checks for AI-built apps (Lovable, Supabase, Bolt): RLS, headers, monitoring, fixes. | Pricing not verified | Tool + MCP | Site checked |
| PromptGuardNot verified | Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client. | Pricing not verified | Tool + MCP | Site checked |
| Proof HoldingsNot verified | One API, all things verified control, delegation, human approval, anti-impersonation. | Pricing not verified | Tool + MCP | Site checked |
| Rösti Threat IntelNot verified | Look up IOCs and search threat-intel reports, YARA rules, MITRE ATT&CK ids and CVEs from rosti.dev. | Pricing not verified | Tool + MCP | Site checked |
| SafePromptNot verified | Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM. | Pricing not verified | Tool + MCP | Site checked |
| SentrintNot verified | Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs. | Pricing not verified | Tool + MCP | Site checked |
| ServerScanNot verified | PCI ASV scan prices, SAQ check, payment page check, PCI guides and scan-failure fixes. | Pricing not verified | Tool + MCP | Site checked |
| SkillTriageNot verified | Scan AI agent skills, MCP server packages and MCP configs before you install them. Static analysis. | Pricing not verified | MCP | Site checked |
| SkycloakNot verified | Managed Keycloak from any MCP client: clusters, realms, apps, SSO, users, domains, audit events. | Pricing not verified | Tool + MCP | Site checked |
| SpellwardenNot verified | Spellwarden scans the skills and MCP servers your agents load and reports findings. | Pricing not verified | Tool + MCP | Site checked |
| StackurityNot verified | Installed software, vulnerabilities and end-of-life components across your servers, apps and repos. | Pricing not verified | Tool + MCP | Site checked |
| TamingDNSNot verified | Check SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, BIMI, DANE and DNSSEC, and analyse email headers. | Pricing not verified | Tool + MCP | Site checked |
| thenetworkeryNot verified | DNS, email auth, TLS, BGP/RPKI, WHOIS and subnet tools with plain-English fixes, plus webhook URLs. | Pricing not verified | Tool + MCP | Site checked |
| ThreatistNot verified | Vulnerability records: CVE, GHSA, CISA KEV, EPSS and vendor fixes in one place. No key needed. | Pricing not verified | MCP | Site checked |
| TrustifiNot verified | Investigate and manage email security across Trustifi plans using AI. | Pricing not verified | Tool + MCP | Site checked |
| UND AssayNot verified | Evidence on MCP servers before you install: publisher, source, provenance, advisories, changes. | Pricing not verified | MCP | Site checked |
| vulntelNot verified | Hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from H1 reports. | Pricing not verified | MCP | Site checked |
| VysionNot verified | Darknet threat intelligence for AI assistants: leaks, documents, chat, ransomware. | Pricing not verified | Tool + MCP | Site checked |
| Wisco LabsNot verified | Check PyPI and npm upgrades: known vulnerabilities, the safe version, and what each upgrade breaks. | Pricing not verified | MCP | Site checked |
| WizWiz | Cloud security platform that prioritises risk across cloud and AI workloads. | Pricing not verified | Tool | Site checked |
| VantaVanta | Automates security and compliance evidence for frameworks such as SOC 2 and ISO 27001. | Contact sales | Tool + MCP | Site checked |
| Client PostureNot verified | Client Posture scans, findings, prospect deal stages, pipeline summary, and quote drafts for MSPs. | Pricing not verified | Tool + MCP | Site checked |
| FlawPilotNot verified | Scan websites and code for security, performance and SEO issues from your AI assistant. | Pricing not verified | Tool + MCP | Site checked |
| heal.devHeal | Agentic testing tool for finding bugs that code review misses; seen on Product Hunt. | Pricing not verified | Tool | Site checked |
| notolensNot verified | Brand protection: watch domains, trademarks, apps and search ads for impersonators, triage matches. | Pricing not verified | Tool + MCP | Site checked |
| DrataDrata | Continuous control monitoring and audit readiness for security frameworks. | Pricing not verified | Tool | Unconfirmed listing |
Roles that do this work
Sectors where it is common
No paid ranking. Reviewed 2026-11-04. Tool fit is an editorial suggestion based on published capabilities. See sources & methodology →