nowfound

AI · alternatives · 2026

24 alternatives to Pencheff

Pentest every target and attack surface

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    AI agents that find, validate, and fix every vulnerability

    Jun 2026 · getastra.com · its alternatives →

  2. 2

    Your ultimate AI-powered ethical hacking assistant

    2023 · copilot.bugbase.ai · its alternatives →

  3. 3

    Autonomous penetration testing platform

    Jun 2026 · dark-moon.org · its alternatives →

  4. 4
    Agenta▲362

    Open-source prompt management & evals for AI teams

    Nov 2025 · agenta.ai · its alternatives →

  5. 5

    Redteaming LLMs using other LLMs. Contribute to traghav/auto-redteam development by creating an account on GitHub.

    2023 · github.com · its alternatives →

  6. 6

    Pentest and patch every deploy with AI

    Jun 2026 · bestdefense.io · its alternatives →

  7. 7

    Drowning in security reports? Dive into insights with Cyber

    2024 · cyber.deployh.ai · its alternatives →

  8. 8

    A powerful automated security testing tool

    2024 · geneau.gumroad.com · its alternatives →

  9. 9

    Hi HN, I built this open-source LLM red teaming tool based on my experience scaling LLMs at a big co to millions of users... and seeing all the bad things people did. How it works: - Uses an unaligned model to create toxic inputs - Runs these inputs through your app using different techniques: raw, prompt injection, and a chain-of-thought jailbreak that tries to re-frame the request to trick the LLM. - Probes a bunch of other failure cases (e.g. will your customer support bot recommend a competitor? Does it think it can process a refund when it can't? Will it leak your user's address?) -…

    2024 · promptfoo.dev · its alternatives →

  10. 10

    Anthropic and OpenAI's publicly available models are explicitly guard-railed so that they refuse offensive tasks. And their cyber-focussed models are gated for enterprises. This leaves SMEs and mid market open to major vulnerabilities. AI can be used as both an adversarial and defensive tool in the world of cyber. A worst case outcome is if only the adversaries have access. Meanwhile, most existing AI cyber tools are just wrappers. The problem is that they still have all the guardrails on from the foundation model where they will inherit its refusals. For this project we've post-trained a…

    Jun 2026 · argusred.com · its alternatives →

  11. 11

    Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic. - promptfoo/promptfoo

    2023 · github.com · its alternatives →

  12. 12AT

    I recently built a small open-source tool to benchmark different LLM API endpoints — including OpenAI, Claude, and self-hosted models (like llama.cpp). It runs a configurable number of test requests and reports two key metrics: • First-token latency (ms): How long it takes for the first token to appear • Output speed (tokens/sec): Overall output fluency Demo: https://llmapitest.com/ Code: https://github.com/qjr87/llm-api-test The goal is to provide a simple, visual, and reproducible way to evaluate performance across different LLM providers, including…

    2025 · llmapitest.com · its alternatives →

  13. 13

    Automated security scanning for LLM applications

    Nov 2025 · penstrike.io · its alternatives →

  14. 14
    RedPill▲35

    The VPN for your AI.

    2025 · redpill.ai · its alternatives →

  15. 15

    Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of duties, and cryptographically signed, offline-verifiable audit logs. - makerchecker/MakerChecker

    Jul 2026 · github.com · its alternatives →

  16. 16AM

    I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use. Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!

    2025 · prompt-injector.blueprintlab.io · its alternatives →

  17. 17

    Spelltest framework simulates conversations between AI ‘synthetic users' in an environment to test and refine LLM-based applications. It ensures your app converse with utmost accuracy and relevance. Post-chat, Spelltest assesses responses, providing qualitative and quantitative feedback on performance. Suitable for both chat and completion modes. When to use: - After modifying your prompt. - When your LLM provider updates. - As a CI step for you repo. All feedback and collaborations appreciated!

    2023 · github.com · its alternatives →

  18. 18

    We're excited to launch compliant-llm: an open-source toolkit that helps infosec and compliance teams audit AI agents against regulatory frameworks like NIST AI RMF, ISO 42001, and OWASP Top 10. Infosec and compliance teams are now responsible for tracking security and compliance risks of a growing number of AI agents across external and internal apps and third-party vendors. compliant-llm gives you a way to: - Define and run comprehensive red-teaming tests for AI agents - Maps test outcomes to compliance frameworks like NIST AI RMF - Generate detailed audit logs and documentation -…

    2025 · github.com · its alternatives →

  19. 19

    Global AI safety platform for red-teaming and trust

    Dec 2025 · projgasi.gt.tc · its alternatives →

  20. 20

    OSS LLM red-teaming fortress: OWASP, compliance & chaos

    2025 · redforge.solvas.ai · its alternatives →

  21. 21

    AI audit, EU AI ACT, Assessment, OWASP LLM 2025,NIST AI RMF

    Jan 2026 · aiaudittool.net · its alternatives →

  22. 22

    Hi I am Aditi and I co-founded Potpie AI with my college mate Dhiren. We are building an open-source infrastructure to create custom agents for engineering use-cases like debugging, system design, integration testing, PR review etc. The agents are powered by a knowledge graph built on your code base to provide better context and memory, leading to better planning and execution. Currently we offer 6 ready-to-use agents but you can also build your custom agents. You can tune agent parameters like purpose, goals, background etc. and they are also empowered by pre-built tooling like code…

    2024 · github.com · its alternatives →

  23. 23IS

    Hey HN! For that last 8 months I've been trying to make agents that can hack web applications to find vulnerabilities in them - An AI Security Tester. The system has 29 agents in total, a custom LLM Orchestration framework which works on the task-subtask architecture (old-school but works amazingly for my use case, and is pretty reliable) with custom agent calling mechanism. No Auo-Gen, Langchain and Crew AI - Everything custom built for pentesting. Each test runs in an isolated Kali linux environment (on AWS Fargate), where the agents have full access to the environment to undertake any…

    2025 · its alternatives →

  24. 24

    Automated pentesting with 18 tools + AI agent

    Feb 2026 · phantomsentinel.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →