Debuly
Agentic Security logo

Agentic Security

Open-source vulnerability scanner that fuzzes and attacks LLM endpoints and agent workflows, from a pip install or CI check.

Open source

What is Agentic Security?

Agentic Security is an open-source scanner for finding weaknesses in large language models and the agents built on them. It sends attack prompts and fuzzed inputs at an LLM API, using customizable rule sets or agent-based attacks, and reports how often the target fails. You install it with pip install agentic_security, start the local server with the agentic_security command, and use the web interface to launch scans. It can also run as a CI check: agentic_security init generates an agesec.toml configuration file, and agentic_security ci runs a scan. A Bayesian optimizer built on scikit-optimize tunes scans to keep failure rates down within a budget, and it stops a module early when the failure rate exceeds 50 percent. The API includes self-probe endpoints for text and image requests, protected by an API key. The documentation states it is a safety scanner, not a foolproof guarantee, and lists no pricing.

Use cases

  • Red-team an LLM application
  • Fuzz an LLM API with attack prompts
  • Stress test a chatbot before launch
  • Add a security scan to a CI pipeline
  • Probe a model with image inputs
  • Tune scans with a token budget

Who it's for

  • Security engineers
  • LLM developers
  • Red teamers

Why use Agentic Security

  • It tests a model or agent with many attack styles in one repeatable scan instead of ad hoc prompts.
  • A pip install and a single command start the server, which keeps setup short.
  • The CI mode lets teams run security scans automatically before a release.
  • The optimizer concentrates the scan budget where the target fails most.
  • No pricing is listed and the tool runs on your own machine.

Agentic Security features

  • Customizable rule sets or agent-based attacks
  • Comprehensive fuzzing for any LLM
  • LLM API integration and stress testing
  • Wide range of fuzzing and attack techniques
  • Single-shot and many-shot scan modes
  • Bayesian optimization of scan parameters
  • Early stopping on high failure rates
  • CI check driven by an agesec.toml config file
  • Image-modality probe endpoint
  • Local web interface

Agentic Security integrations

  • scikit-optimize

How to get started with Agentic Security

  1. Install the package with pip install agentic_security.
  2. Start the application with the agentic_security command, which initialises the server and web interface.
  3. Describe the LLM endpoint you want to test and choose the attack modules or rule sets.
  4. Run a scan from the interface, or run agentic_security init and agentic_security ci to use it as a CI check.
  5. Review the failure rates by module, then adjust the configuration in agesec.toml and scan again.

Agentic Security limitations

  • The documentation says it is a safety scanner, not a foolproof solution, and cannot guarantee protection against every threat
  • Self-run tool: you provide the target LLM endpoint and API keys
  • The documentation is brief, so the repository is the place for deeper setup detail

Agentic Security pricing

Agentic Security is open source, so you can use and self-host it for free.

Prices can change and may vary by country or exclude tax. Check the official pricing page.

Agentic Security alternatives

The main Agentic Security alternatives listed on Debuly are Promptfoo, Agentic Radar, PromptInject, Blackbox AI, LeanCTX and OpenLIT. The table compares pricing and platforms; order is A–Z.

Agentic Security compared with its alternatives
ToolPricingStarting pricePlatforms
Agentic SecurityOpen source—Web, API, Self-hosted
Agentic RadarOpen source——
Blackbox AIContact sales$0.05, usage-basedAPI, CLI, Web
LeanCTXFreemium$9/moCLI, Self-hosted, API
OpenLITOpen source—Web, CLI, API, Self-hosted
PromptfooOpen source—CLI, Web, API, Self-hosted
PromptInjectOpen source——
  1. Agentic Radar

    Free open-source scanner from SPLX that maps agentic AI workflows from source code and flags tool-level security risks.

  2. Blackbox AI

    Inference platform with one OpenAI-compatible endpoint for 300+ open and closed models, encrypted connections, and dedicated enterprise deployments.

  3. LeanCTX

    Open-source context gateway that trims what AI coding tools read, caches repeat reads and logs what each agent was given.

  4. OpenLIT

    Open-source, OpenTelemetry-native platform for tracing, evaluating and guarding AI agents, with cost and GPU monitoring

  5. Promptfoo

    Open-source LLM evaluation and red-teaming tool that finds prompt injections, jailbreaks and data leaks in AI apps and agents.

  6. PromptInject

    Open-source Python research framework for building adversarial prompts and testing LLMs against goal hijacking and prompt leaking.

Agentic Security FAQ

How do I install Agentic Security?

Run pip install agentic_security, then start it with the agentic_security command. You can also run python -m agentic_security, or agentic_security --help to see the options.

Is Agentic Security free?

The documentation lists no pricing or paid plans and shows a pip-installable open-source tool, so it is free to run on your own machine.

Can I use Agentic Security in CI?

Yes. Run agentic_security init to create a default agesec.toml file, then agentic_security ci to run a security scan as part of a pipeline.

Does Agentic Security have an API?

Yes. It exposes self-probe endpoints at /v1/self-probe and /v1/self-probe-image for integration testing, and all requests need an API key in the Authorization header.

Can Agentic Security guarantee my model is safe?

No. The documentation says it is designed as a safety scanner and not a foolproof solution, so passing a scan does not prove protection against all threats.

What are alternatives to Agentic Security?

Alternatives for testing LLM safety include Promptfoo, Garak, PyRIT and Agentic Radar.

Sources & verification

Facts on this page come from the official sources below, each with the date we read it. Written by Debuly; the vendor did not review this page.

Image credits

  • Logo: from res.cloudinary.com · fetched · Vendor trademark, used only to identify the product; removed on request
  • Cover: none collected yet, so a generated tile is shown.

Spot an error? Report an issue with this listing. We also remove a logo or image on the owner's request.