| What it does | Secure AI agents, with evidence
| Security checks for AI-built apps before launch
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | GR
| GB
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Community: €0 (open source, 1x monthly testing volume, weekly monitoring, 3 seats, 30-day data retention). Team: €349/mo (20x monthly testing volume, 10 seats, 90-day data retention, webhooks, priority support). Enterprise: Custom pricing (contact for details).
| Free: All checks, terminal and JSON output, exit codes for CI. Pro: £99/year or £12/month, includes HTML reports, scan history, comparison features, priority support, 2 machines. Agency: £349/year, includes white-label reports, scan multiple projects in one report, 10 machines.
|
|---|
| Key features | - Automated adversarial testing with multi-turn and agentic attack chains
- Black-box testing without SDK installation or agent modification
- Four-tier Humanbound Firewall with LLM judge
- Continuous posture score from 0 to 100
- Framework mapping to EU AI Act, NIST AI RMF, OWASP LLM Top 10, OWASP Agentic AI Top 10
- Air-gapped testing with self-hosted models like Ollama
- Export compliance evidence in HTML, PDF, JSON, SARIF, CEF formats
- Webhook integration with SIEM and ticketing systems
- Apache-2.0 open source CLI, testing engine, and SDK
- Baseline campaign completion in hours
| - Detects leaked secrets including API keys, passwords, and LLM keys in browser code
- Checks database and storage security including row-level security policies and open Firestore rules
- Identifies API route and payment vulnerabilities including missing auth checks and unverified webhooks
- Detects AI and agent security issues including system prompt injection and unsafe model output rendering
- Scans dependencies for known vulnerabilities using OSV database
- Runs entirely locally with code never leaving your machine
- Works offline and integrates with CI pipelines using environment variables
- Provides fix suggestions and AI-ready prompts for each finding
- Supports multiple frameworks including Next.js, React, Vue, Svelte and platforms like Supabase, Firebase, Stripe
- Generates shareable HTML reports and tracks scan history with Pro plan
|
|---|
| What makes it different | - Continuous monitoring instead of point-in-time reports
- Adaptive multi-turn attack chains that evolve over time
- Same open-source code as platform with nothing held back or limited
- No account required for local open-source testing
- Framework mapping and compliance evidence for regulatory requirements
| - Designed specifically for security gaps that AI coding tools create
- Code never leaves your machine, with zero uploads required
- Low false alarms through context-aware checking of actual code behavior
- Free tier includes all core checks with no limitations
- Source-available license with code readable on GitHub
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 14 ▲ +1 (up) since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 8 | 0 |
|---|
| Citation Flow (Majestic) | 30 | 0 |
|---|
| Referring domains (Majestic) | 71 | 0 |
|---|
Humanbound
Seaworthy