Developers
Review agent manifests, scopes and instructions before shipping.
Free AI Agent Security Platform
Find risky agent permissions, tools and configurations before deployment.
Static security analysis for AI agent configurations, prompts, tool manifests, policies and logs. No registration. No paid API required.
✓ Files never executed✓ No third-party AI API✓ Evidence-based findings✓ JSON/CSV/PDF export
Flagship scanner
One scan. Multiple security boundaries.
Review permissions, tool capabilities, exposed secrets, prompt-injection indicators, shell execution, network access, browser automation, approval controls, OAuth scopes, memory and action logs.
Open Security Scanner →Example risk score58/100
- Wildcard write permission
- Command execution capability
- No visible approval gate
- Unrestricted outbound access
Security tools
Each tool uses a purpose-built input workflow and a tested subset of the shared security engine.
Agent Security
AI Agent Security Scanner
Analyze AI agent permissions, tools, prompts, credentials, workflows, browser access, network access, delegation and approval controls.
Developer ToolsAgent Configuration Validator
Validate common AI agent configuration structures and highlight missing or risky security controls.
PermissionsAgent Permission Security Analyzer
Review declared permissions for excessive privilege, dangerous combinations and weak isolation.
Agent SecurityAgent Tool Capability Analyzer
Inspect declared tools and capabilities for high-impact actions and privilege concerns.
Data SecurityAgent Secret Exposure Scanner
Detect likely exposed credentials and secret-bearing configuration values without sending content to third-party AI APIs.
Prompt SecurityPrompt Injection Indicator Analyzer
Identify suspicious prompt-injection indicators and unsafe trust-boundary patterns in supplied instructions.
Agent SecurityAgent Shell Command Risk Analyzer
Inspect declared command-execution capabilities and supplied command fragments for dangerous patterns.
Agent SecurityAgent Network Permission Analyzer
Review network access declarations and URL policies for broad, internal or unrestricted access.
Built for practical security work
Security teams
Get evidence, severity, confidence and remediation rather than generic warnings.
Startups
Use free static checks without adding another paid API dependency.
Governance teams
Generate review checklists and least-privilege policy guidance.