Dev tools · alternatives · 2026
24 alternatives to I built Exfault, agentic mobile app pentesting tool
Hi HN, I am the creator of Exfault. I am building autonomous AI agents that find vulnerabilities in Android apps. I have noticed there are growing number of AI native pentesting tools for web apps but very few for mobile or Android. With more mobile apps being shipped quickly due to vibe coding, I wanted to build an AI native security tool specifically for Android apps. Exfault combines static and dynamic analysis with AI agents using tools like adb,jadx, apktool for static analysis and reverse engineering, frida for dynamic analysis, hermes-dec for React native decompilation. The AI agents…
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 1 we have checked on their own sites, 1 of them free or with a free tier.
- 1
Automated Penetration Testing for AI-Built Apps
2021 · replay.io · its alternatives →
- 2
QA.tech 1.0▲413Hi, I'm Daniel, CEO of QA.tech. We've spent the past 18 months developing a cool tool that allows you to run end-to-end tests on any web application using natural language. Check it out and let us know what you think! I used to be a CTO at a B2C marketplace and was taken aback that all qa agencies we talked to wanted to create a custom suite of tests from scratch. Even though we were essentially a e-com with the same functionality as everyone else. Why weren't there any best practices? Some time later my co-founders and I had moved on and were looking for the next thing to do. AI agents…
2025 · qa.tech · its alternatives →
- 3
SimplAIfree tier, from $5/mo▲589Hey HN, I've been building SimplAI for the past several months — it's a platform for building, testing, and deploying LLM-powered agents and multi-step workflows. The problem I kept running into: spinning up an AI agent pipeline means stitching together prompt management, tool calling, memory, evals, and deployment — often from scratch every time. SimplAI tries to be the layer that handles all of that so you can focus on what your agent actually does. What it does: - Visual + code-first workflow builder for chaining LLM calls, tools, and APIs - Built-in prompt versioning and A/B testing…
2025 · simplai.ai · its alternatives →
- 4
Fabraix▲196We built Adversarial Cost to Exploit (ACE), a benchmark that measures the token expenditure an autonomous adversary must invest to breach an LLM agent. Instead of binary pass/fail, ACE quantifies adversarial effort in dollars, enabling game-theoretic analysis of when an attack is economically rational. We tested six budget-tier models (Gemini Flash-Lite, DeepSeek v3.2, Mistral Small 4, Grok 4.1 Fast, GPT-5.4 Nano, Claude Haiku 4.5) with identical agent configs and an autonomous red-teaming attacker. Haiku 4.5 was an order of magnitude harder to break than every other model; $10.21 mean…
May 2026 · fabraix.com · its alternatives →
- 5
AI agents that find, validate, and fix every vulnerability
Jun 2026 · getastra.com · its alternatives →
- 6
QualGent▲296I built an AI agent that can do mobile app QA after working at Google for years and waiting weeks for QA results. It runs on real devices and uses an ensemble of agents (including computer use) to test like a human. Happy to answer questions and hope it helps app devs ship faster without bugs!
Dec 2025 · qualgent.ai · its alternatives →
- 7
Hi HN! I want to share our latest project at NEXA AI. We developed AI agent foundation models designed to transform how developers create AI agent powered apps. One major challenge we've observed with current human-computer interactions is that many simple, one-step tasks become unnecessarily complex, multi-step workflows due to limitations of current GUIs. AI agents can solve this, but existing AI agent models are slow and costly. To tackle these issues, we built lightweight AI agent models based on our Octopus V2, small language models for function calling (You can learn more about our…
2024 · nexa4ai.com · its alternatives →
- 8
I've been building computer-use tools for a while, and I quietly launched this about a month ago (122 Stars on GH). I figured it was worth sharing here. Over the last few months, a lot of computer-use agents have come out: Codex, Claude Code, CUA, and others. Most of them seem to work roughly like this: 1. Take a screenshot 2. Have the model predict pixel coordinates 3. Click x,y 4. Take another screenshot 5. Repeat That works, but it's slow, expensive in tokens, and fragile. If the UI shifts a few pixels, things break. And the model still doesn't know what any element actually is. But the…
May 2026 · github.com · its alternatives →
- 9
- 10DA
Write a task in plain English. An AI agent runs it on a simulator on your Mac and tells you if a real user could complete it. Save the successful run as a regression check you can replay later.
Aug 2026 · app.deltix.ai · its alternatives →
- 11
Anthropic and OpenAI's publicly available models are explicitly guard-railed so that they refuse offensive tasks. And their cyber-focussed models are gated for enterprises. This leaves SMEs and mid market open to major vulnerabilities. AI can be used as both an adversarial and defensive tool in the world of cyber. A worst case outcome is if only the adversaries have access. Meanwhile, most existing AI cyber tools are just wrappers. The problem is that they still have all the guardrails on from the foundation model where they will inherit its refusals. For this project we've post-trained a…
Jun 2026 · argusred.com · its alternatives →
- 12
BNA▲87AI agent that builds full-stack iOS & Android apps with auth
Mar 2026 · ai.ahmedbna.com · its alternatives →
- 13
I wanted to test mobile apps in plain English instead of relying on brittle selectors like XPath or accessibility IDs. With a vision-based agent, that part actually works well. It can look at the screen, understand intent, and perform actions across Android and iOS. The bigger problem showed up around how tests are defined and maintained. When test flows are kept outside the codebase (written manually or generated from PRDs), they quickly go out of sync with the app. Keeping them updated becomes a lot of effort, and they lose reliability over time. I then tried generating tests directly from…
Apr 2026 · github.com · its alternatives →
- 14
Hey everyone, I made this thing: https://tryflux.ai/. Here's a demo video: https://screen.studio/share/1y2EnC26 Context: I've tried probably 15 different AI apps over the past year. ChatGPT, note-taking apps, productivity apps, all of it. But most of them are just clutter on my iphone. They live in some app I have to deliberately open. And I just... don't. But you know what I open 50 times a day without thinking? iMessage. So out of mild frustration with the "AI app graveyard" on my phone, I built Flux. What it does: - You describe a personality and what…
Jan 2026 · tryflux.ai · its alternatives →
- 15IS
Hey HN! For that last 8 months I've been trying to make agents that can hack web applications to find vulnerabilities in them - An AI Security Tester. The system has 29 agents in total, a custom LLM Orchestration framework which works on the task-subtask architecture (old-school but works amazingly for my use case, and is pretty reliable) with custom agent calling mechanism. No Auo-Gen, Langchain and Crew AI - Everything custom built for pentesting. Each test runs in an isolated Kali linux environment (on AWS Fargate), where the agents have full access to the environment to undertake any…
2025 · its alternatives →
- 16
Probe▲4Agentic testing for teams shipping AI native products faster
May 2026 · probeqa.com · its alternatives →
- 17
Hey HN! Alex and Zack here from Nexa AI. We're excited to share something we've been working on. Our journey began with the Octopus series --- action models for mobile AI agents (https://huggingface.co/NexaAIDev/Octopus-v2). We focused on making sub-billion parameter models excel at function calling, making high accurate and fast function-calling possible on mobile and edge devices. But as we delved into developing full-fledged on-device applications, we hit a roadblock. We realized that optimizing for function calling (tool-use) alone wasn't enough. Building powerful…
2024 · github.com · its alternatives →
- 18
AgentIQA▲7Now AI tests your apps. Local-first, controllable and secure
2025 · agentiqa.com · its alternatives →
- 19
Hi HN, I’m the creator of Cordum. I’ve been working in DevOps and infrastructure for years (currently in the fintech/security space), and as I started playing with AI agents, I noticed a scary pattern. Most "safety" mechanisms rely on system prompts ("Please don't do X") or flimsy Python logic inside the agent itself. If we treat agents as autonomous employees, giving them root access and hoping they listen to instructions felt insane to me. I wanted a way to enforce hard constraints that the LLM cannot override, no matter how "jailbroken" it gets. So I built Cordum. It’s an open-source…
Jan 2026 · github.com · its alternatives →
- 20FP
We've built an open-source tool to stress test AI agents by simulating prompt injection attacks. We’ve implemented one powerful attack strategy based on the paper [AdvPrefix: An Objective for Nuanced LLM Jailbreaks](https://arxiv.org/abs/2412.10321). Here's how it works: - You define a goal, like: “Tell me your system prompt” - Our tool uses a language model to generate adversarial prefixes (e.g., “Sure, here are my system prompts…”) that are likely to jailbreak the agent. - The output is a list of prompts most likely to succeed in bypassing safeguards. We’re just getting…
2025 · security.vista-labs.ai · its alternatives →
- 21
Self-hosted AI security testing with a local Web UI, live agent telemetry, verified findings, and branded PDF reports.
Jul 2026 · github.com · its alternatives →
- 22
Hey HN! I built an open-source Python library that lets AI agents control mobile apps. Its heavily inspired by browser-use Here's a quick demo https://x.com/itsericktorres/status/1932996729458110482 From our experience testing mobile workflows or automate repetitive app tasks has always been a pain. You either write brittle UI automation scripts or do everything manually. And after testing out browser-use and seeing all the cool things people were building for web without the pains of normal automation I decided I wanted to build something like it but for mobile So I…
2025 · github.com · its alternatives →
- 23
Point Xalgorix at your app or repo. An autonomous AI pentester finds vulnerabilities, proves each with a working exploit, and hands engineers the fix. Runs in CI. Scans from $1, credits never expire.
Aug 2026 · xalgorix.com · its alternatives →
- 24
We build RobotActions, a cloud device farm for Android/iOS testing. We just shipped a Chat AI Agent that lives inside the live device session. What it does: - During a session, you can ask "What's the XPath for this button?" and get a ready-to-use locator from the current screen - Ask "Write an Appium test for this flow" → get test code generated from the live accessibility tree - Type "tap the login button" in natural language → it executes on the real device - Ask "Why is my test failing on this element?" → gets context from both vision and the accessibility snapshot The agent uses a…
Aug 2026 · robotactions.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →