AI Agent Security Tools
Working static-analysis utilities powered by shared, tested security rules.
AI Agent Security Scanner
Analyze AI agent permissions, tools, prompts, credentials, workflows, browser access, network access, delegation and approval controls.
Developer ToolsAgent Configuration Validator
Validate common AI agent configuration structures and highlight missing or risky security controls.
PermissionsAgent Permission Security Analyzer
Review declared permissions for excessive privilege, dangerous combinations and weak isolation.
Agent SecurityAgent Tool Capability Analyzer
Inspect declared tools and capabilities for high-impact actions and privilege concerns.
Data SecurityAgent Secret Exposure Scanner
Detect likely exposed credentials and secret-bearing configuration values without sending content to third-party AI APIs.
Prompt SecurityPrompt Injection Indicator Analyzer
Identify suspicious prompt-injection indicators and unsafe trust-boundary patterns in supplied instructions.
Agent SecurityAgent Shell Command Risk Analyzer
Inspect declared command-execution capabilities and supplied command fragments for dangerous patterns.
Agent SecurityAgent Network Permission Analyzer
Review network access declarations and URL policies for broad, internal or unrestricted access.
Browser SecurityBrowser Agent Security Checker
Assess browser-agent navigation, downloads, form submission, session and network controls.
PermissionsHuman Approval Policy Checker
Check whether high-impact agent actions appear to require human confirmation or approval.
PermissionsAgent OAuth Scope Analyzer
Review OAuth scopes and permission strings for broad account access and persistent refresh access.
Audit & MonitoringAgent Action Log Analyzer
Analyze supplied action logs for suspicious execution, credential, network, denial and retry events.
GovernanceLeast-Privilege Policy Generator
Generate a practical least-privilege policy template based on the capabilities you provide.
GovernanceAgent Deployment Security Checklist
Create a deployment-focused security checklist using risks visible in the supplied configuration.
PermissionsAgent Authorization Policy Validator
Check supplied authorization policy text for disabled enforcement, anonymous access and wildcard principals.
Prompt SecurityAgent Instruction Security Analyzer
Inspect trusted instructions for unsafe interpolation of user or external content.
Agent SecurityAgent Workflow Security Checker
Detect risky automatic execution, excessive retries and self-modifying workflow controls.
Prompt SecurityUntrusted Input Boundary Checker
Find indicators that external or untrusted content can flow directly into tools or trusted instructions.
Data SecurityAgent Memory Security Analyzer
Review persistent memory indicators for retention and cross-user isolation concerns.
Prompt SecurityAgent Output Handling Risk Checker
Detect unsafe execution, raw HTML rendering and query construction using model-generated output.
Developer ToolsAgent Tool Manifest Analyzer
Review tool schemas and manifests for unconstrained arguments and broad catch-all operations.
Browser SecurityURL Access Policy Checker
Review URL allowlists for wildcards, local-file schemes and private-network destinations.
Data SecurityAgent Data Exfiltration Risk Analyzer
Identify combinations of sensitive-data access and outbound communication capabilities.
Data SecuritySensitive Data Access Analyzer
Check for broad access to PII, customer records, credentials and other sensitive data.
Audit & MonitoringAgent Logging Privacy Checker
Detect logging settings that may capture credentials, prompts or raw sensitive payloads.
Audit & MonitoringSuspicious Agent Activity Detector
Analyze supplied logs for repeated denials, privilege seeking and unexpected outbound behavior.
Developer ToolsAgent Supply Chain Security Checker
Detect floating dependency versions, moving source branches and insecure remote sources.
Agent SecurityAgent-to-Agent Trust Boundary Checker
Review peer-agent communication and trust declarations for unrestricted peers or implicit trust.
PermissionsAgent Delegation Permission Checker
Review delegation rules for unrestricted delegation, permission inheritance and excessive depth.
Developer ToolsAgent Change Impact Analyzer
Inspect supplied configuration diffs for newly added privileged capabilities or disabled controls.
GovernanceAgent Risk Assessment Generator
Generate a deterministic static risk summary from the supported security analyzers.
Developer ToolsAgent Security Test Case Generator
Generate defensive test cases for permissions, prompt injection, tool misuse and approval enforcement.