AI · alternatives · 2026
24 alternatives to Xalgorix – open-source AI pentester that proves vulnerabilities
Point Xalgorix at your app or repo. An autonomous AI pentester finds vulnerabilities, proves each with a working exploit, and hands engineers the fix. Runs in CI. Scans from $1, credits never expire.
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
Self-hosted AI security testing with a local Web UI, live agent telemetry, verified findings, and branded PDF reports.
Jul 2026 · github.com · its alternatives →
- 2
AI agents that find, validate, and fix every vulnerability
Jun 2026 · getastra.com · its alternatives →
- 3
Fabraix▲196We built Adversarial Cost to Exploit (ACE), a benchmark that measures the token expenditure an autonomous adversary must invest to breach an LLM agent. Instead of binary pass/fail, ACE quantifies adversarial effort in dollars, enabling game-theoretic analysis of when an attack is economically rational. We tested six budget-tier models (Gemini Flash-Lite, DeepSeek v3.2, Mistral Small 4, Grok 4.1 Fast, GPT-5.4 Nano, Claude Haiku 4.5) with identical agent configs and an autonomous red-teaming attacker. Haiku 4.5 was an order of magnitude harder to break than every other model; $10.21 mean…
May 2026 · fabraix.com · its alternatives →
- 4
- 5
- 6
- 7
0xAudit▲110The security layer for AI agents to scan, fix verify via MCP
Feb 2026 · 0-x-audit.com · its alternatives →
- 8
Your ultimate AI-powered ethical hacking assistant
2023 · copilot.bugbase.ai · its alternatives →
- 9
Playground▲198We build AI agents to find vulnerabilities in other AI agents. The playground started as an internal tool that we used to test our own offensive agent Nyx. But we realised that hacking an AI is about have as wide a distribution of attacks as possible, especially those which aren't in the distribution of the models. So we are launching playground as a platform to crowdsource agent jailbreaks. And although hacking AI is super fun and we are sure people will do it for free, we want to reward those who help us push forward the offensive frontier of AI. So we are committing $100K in prizes over…
Jul 2026 · playground.fabraix.com · its alternatives →
- 10DA
Write a task in plain English. An AI agent runs it on a simulator on your Mac and tells you if a real user could complete it. Save the successful run as a regression check you can replay later.
Aug 2026 · app.deltix.ai · its alternatives →
- 11
I built an open-source AI agent for security testing to find and fix vulnerabilities in your code. I’ve noticed how bad security vulnerabilities have gotten with everyone shipping AI code slop, so I wanted to build something that allows for vibe-coding at full speed without compromising security. Traditional security tools aren’t effective, and manual pen-testing can’t keep up with the rapidly growing AI code This tool runs your code dynamically, finds vulnerabilities, and validates them through actual exploitation. You can either run it against your codebase or enter your (or someone…
2025 · github.com · its alternatives →
- 12
- 13
X Detector▲115AI detector & checker for ChatGPT, Claude & Gemini
2024 · xdetector.ai · its alternatives →
- 14
Octrafic▲130Test your APIs in plain English, straight from the terminal
Mar 2026 · its alternatives →
- 15
Anthropic and OpenAI's publicly available models are explicitly guard-railed so that they refuse offensive tasks. And their cyber-focussed models are gated for enterprises. This leaves SMEs and mid market open to major vulnerabilities. AI can be used as both an adversarial and defensive tool in the world of cyber. A worst case outcome is if only the adversaries have access. Meanwhile, most existing AI cyber tools are just wrappers. The problem is that they still have all the guardrails on from the foundation model where they will inherit its refusals. For this project we've post-trained a…
Jun 2026 · argusred.com · its alternatives →
- 16
DeepXL Corp▲63AI fraud detection for documents, IDs, and images
May 2026 · deepxl.ai · its alternatives →
- 17
Hi HN, I am the creator of Exfault. I am building autonomous AI agents that find vulnerabilities in Android apps. I have noticed there are growing number of AI native pentesting tools for web apps but very few for mobile or Android. With more mobile apps being shipped quickly due to vibe coding, I wanted to build an AI native security tool specifically for Android apps. Exfault combines static and dynamic analysis with AI agents using tools like adb,jadx, apktool for static analysis and reverse engineering, frida for dynamic analysis, hermes-dec for React native decompilation. The AI agents…
Jun 2026 · exfault.com · its alternatives →
- 18
- 19
AI agents that hack your apps before attackers do
Mar 2026 · penetrify.cloud · its alternatives →
- 20
We build runtime security for AI agents. The playground started as an internal tool that we used to test our own guardrails. But we kept finding the same types of vulnerabilities because we think about attacks a certain way. At some point you need people who don't think like you. So we open-sourced it. Each challenge is a live agent with real tools and a published system prompt. Whenever a challenge is over, the full winning conversation transcript and guardrail logs get documented publicly. Building the general-purpose agent itself was probably the most fun part. Getting it to reliably use…
Mar 2026 · github.com · its alternatives →
- 21FP
We've built an open-source tool to stress test AI agents by simulating prompt injection attacks. We’ve implemented one powerful attack strategy based on the paper [AdvPrefix: An Objective for Nuanced LLM Jailbreaks](https://arxiv.org/abs/2412.10321). Here's how it works: - You define a goal, like: “Tell me your system prompt” - Our tool uses a language model to generate adversarial prefixes (e.g., “Sure, here are my system prompts…”) that are likely to jailbreak the agent. - The output is a list of prompts most likely to succeed in bypassing safeguards. We’re just getting…
2025 · security.vista-labs.ai · its alternatives →
- 22
- 23
Attestix▲4Open-source identity and EU AI Act compliance for AI agents
Feb 2026 · attestix.io · its alternatives →
- 24
I have a weird habit of guessing whether something's AI before I check, especially on LinkedIn and Reddit (for obvious reasons). The detectors I used to confirm were mostly junk and built to sell you a "humanizer" upsell, so I went and read the actual research on what gives AI text away in 2026, then built my own (no login and free) The main sources I used are these: https://arxiv.org/abs/2406.07016 https://arxiv.org/abs/2403.07183 https://aclanthology.org/2025.coling-main.426/ https://arxiv.org/abs/2410.16107…
Jun 2026 · isitslop.xyz · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →