AI Directory · Researched reviews · ASEAN lens
Security & Safety
14 tools · Security & Safety · Most popular
How to choose an AI security tool
Two very different products share this shelf: tools that use AI to defend conventional systems, and tools that defend AI systems themselves. They solve unrelated problems and are frequently marketed in the same language. Work out which one you need first.
For the first group, the question is what it does with what it finds. Detection is largely commoditised; triage is not. A tool that surfaces four hundred findings a week has added work unless it can rank them by real exploitability in your environment and explain the ranking well enough that an analyst will act on it.
For the second, the attack surface is newer than most buying processes assume. Prompt injection, tool poisoning, and over-permissioned agent connectors are live categories with a vulnerability stream behind them, and an agent stack assembled from third-party components inherits every one of them.
Deployment model is the practical gate. Agentless scanning is fast to adopt and sees less; agents see more and need change approval. And for regulated work in the region, where the analysis runs is often decided before any of this is discussed.
Also listed in Security & Safety
65 more tools we track but have not written up in depth. Each entry links to the vendor's own site; we have not tested these tools.
-
360 Security LLM 360安全大模型 360's six-model security AI, delivered through its own enterprise products
-
Abnormal AI Behavioural AI email security, now stretching to identity and AI
-
Adversa AI Runtime security for AI coding agents, plus AI red teaming
-
Aikido Security All-in-one code, cloud and runtime security for developer teams
-
Aqua Security Runtime-first cloud-native security, from the makers of Trivy
-
Arctic Wolf AI Managed detection and response with AI-powered concierge security analysts available 24/7.
-
BigID Sensitive-data discovery that extends to privacy, access and AI governance
-
Bitsight Cyber Threat Intelligence (formerly Cybersixgill) Cybersixgill's dark-web intelligence, now sold as Bitsight CTI
-
Chainguard Hardened open source artifacts, from container images to AI agent skills
-
Cisco AI Defense Cisco's AI security suite, from red teaming to runtime guardrails for agents
-
Cranium Discover, govern, secure and prove enterprise AI and agents
-
Credo AI Enterprise AI governance with policy packs for the EU AI Act and NIST
-
CrowdStrike Charlotte AI CrowdStrike's agentic security analyst and agent builder inside Falcon
-
Cybereason MalOp-based EDR/XDR, now sold by LevelBlue as LevelBlue Endpoint Security
-
Cyera Agentless DSPM that grew into DLP, identity and AI-agent security
-
Darktrace AI-native cybersecurity platform
-
Drata Compliance automation and trust management with AI agents
-
Dropzone AI AI SOC analyst that investigates every alert end-to-end
-
DryRun Security AI-native contextual security for every pull request — catch exploitable risks before they merge, not after.
-
Endor Labs Reachability-based application security for code written by people and agents
-
Exabeam Behaviour-analytics SIEM, now with Nova AI agents and LogRhythm on-prem
-
F5 AI Guardrails (formerly CalypsoAI) CalypsoAI's runtime AI guardrails, sold by F5 since the September 2025 acquisition
-
Giskard Paris-built red teaming, evaluation and guardrails for AI agents
-
GitGuardian Secrets detection and non-human identity security
-
Google Threat Intelligence (Mandiant) Mandiant's frontline research and VirusTotal, queried through Gemini
-
GPTZero Sentence-level AI-writing detection, now being folded into Superhuman
-
Hunters A next-gen SIEM with detections built and tuned for you
-
Irregular (formerly Pattern Labs) Frontier AI security lab evaluating models' offensive cyber capabilities
-
Knostic Security for AI coding agents, MCP servers and Copilot oversharing
-
Lakera Prompt-injection guardrails and AI red teaming, now part of Check Point
-
Lightwell IBM and Red Hat's verified, patched open-source packages for enterprises
-
Material Security Email, file and OAuth-app security for Google Workspace and Microsoft 365
-
Mindgard Attacker-style reconnaissance and red teaming for AI apps and agents
-
Monitaur ML Assurance The AI model governance platform built for regulated industries — from policy to proof, across the full ML lifecycle.
-
MOZN Riyadh enterprise AI for financial crime, with Arabic-native name screening
-
Nightfall AI Data loss prevention for SaaS, endpoints and AI agents, priced by quote
-
Nira Dropbox-owned access governance for Google Drive, Microsoft 365 and Dropbox
-
Orca Security Agentless-first cloud security platform with AI agents that triage and fix
-
Originality.ai Publisher-grade AI detection and plagiarism checking built for content marketing teams and web publishers.
-
Palo Alto Cortex Palo Alto Networks' SecOps platform: XSIAM, XDR, Cortex Cloud and AgentiX agents
-
Pangram Labs AI-text detector with the lowest false-positive rate in a Chicago study
-
Pillar Security Discover, red-team and guard every AI agent in one platform
-
Prompt Security (SentinelOne) GenAI and agent security, now sold inside SentinelOne Singularity
-
Protect AI (now Prisma AIRS) ML model security start-up, now inside Palo Alto Networks' Prisma AIRS
-
Radiant Security Autonomous AI SOC — the technology was bought by Cribl in August 2026 and the site is gone
-
Safeskill ThreatBook's scanner and curated hub for AI agent skills
-
Sangfor Security GPT Sangfor's GenAI engine inside Athena XDR and MDR, not sold standalone
-
Securiti AI Veeam-owned platform for data security, privacy and AI governance
-
Securonix Behaviour-analytics SIEM with an AI SOC analyst, backed by Vista Equity
-
SentinelOne Purple AI SentinelOne's AI analyst that hunts on request and investigates alerts on its own
-
Snyk DeepCode AI The AI engine behind Snyk Code scanning and Snyk Agent Fix
-
Socket Catches malicious open-source packages by behaviour, before they merge
-
Splunk AI Assistant Plain-language Splunk searches and agentic investigations, at no extra fee
-
Sprinto Compliance automation for SOC 2, ISO 27001 and 200+ frameworks
-
Sweet Security Runtime protection for cloud workloads and AI agents
-
Tenable Hexa AI (Tenable One) Agentic AI layer for Tenable One exposure management
-
Trellix Helix FireEye's Helix, now Trellix's SecOps platform with GenAI alert triage
-
Truffle Security (TruffleHog) Finds leaked credentials and checks whether they still work
-
Turnitin AI Writing Detection The default campus AI detector, licensed through Turnitin Originality
-
Vanta Continuous compliance automation for SOC 2, ISO 27001 and 35+ frameworks
-
Wiz AI AI security posture management and security agents from Wiz, now part of Google Cloud
-
Xiaodun Future 小盾未来 AI fraud and credit-risk platform for banks, insurers and fintechs (formerly Tongdun)
-
ZeroPath AI code scanner that hunts logic and auth flaws, then writes the patch
-
Zscaler AI Protect Zscaler's AI security layer: find shadow AI, govern access, test your own AI