Home / Compare / Agentic pentesting AI agents

Agentic pentesting AI agents

Name: Agent Index auditors.json
Creator: Heritage Services
License: https://creativecommons.org/licenses/by/4.0/

Quick answer

Agentic pentesting AI agents lists 33 verified listings for Autonomous or AI-assisted penetration testing, attack-surface testing and exploitable-path verification in dataset v0.1.27 (generated 2026-10-27).

Verified listings tagged for pen-test-management.

This is not a ranking or score.

Verified listings tagged for pen-test-management. This update adds Pentera AI-powered exposure validation and Vulnetic Sable. AWS Continuum is listed for its generally available penetration-testing capability only. Fields come from the open dataset. This is not a ranking or score.

Key facts

From this dataset

33 verified listings on this page, with headquarters in 5 HQ regions and 14 countries.
Dataset version 0.1.27, generated 2026-10-27.
Autonomous or AI-assisted penetration testing, attack-surface testing and exploitable-path verification

Cite as: Agent Index by Heritage Services, Agentic pentesting AI agents, dataset v0.1.27 (https://theagentindex.io/compare/agentic-pentesting/)

FAQ (from this dataset)

What is listed on this use-case table?

Autonomous or AI-assisted penetration testing, attack-surface testing and exploitable-path verification 33 verified listings from Agent Index dataset v0.1.27.

How many listings are on this page?

33 verified listings in dataset v0.1.27 (2026-10-27).

Which listings are headquartered in India, Asia-Pacific or Australia/NZ?

3 of 33 listings on this page publish an HQ in India, Asia-Pacific or Australia/New Zealand: Nullify autonomous product-security agents (find-to-fix with merge-ready PRs and AI Pentest Agent) (Australia), RaonSecure OneSOAR (AI autonomous security control tower) and OneHacker (AI pentester) from the ONE AI agentic platform (South Korea), Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing) (Japan).

Is this a ranking?

No. This is not a ranking or score. Order is mechanical (from dataset fields such as name, framework-tag count or table membership), not a paid placement or quality judgement.

Field	Hadrian Nova (agentic pentesting)	Escape (AI pentesting and DAST)	Equixly Agentic AI Hacker (continuous API pentesting)	Ethiack Hackian (agentic AI pentesting)	Intruder AI Pentesting	Horizon3.ai NodeZero (autonomous pentesting)	RunSybil Sybil (AI offensive security / autonomous pentesting)	AWS Continuum for penetration testing (formerly AWS Security Agent)	YesWeHack Agentic Pentest	Patrowl Agentic AI Penetration Testing	Synack Sara AI Pentesting	Aikido Attack AI Pentesting	Simbian AI Pentest Agent	AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy)	Check Point Agentic Exposure Validation (AEV, AI agents that prove external exploitability)	Ridge Security RidgeGen (agentic AI red teaming) and RidgeBot	Edgescan Atomic (agentic autonomous penetration testing in the Edgescan platform)	depthfirst autonomous security agents (code, supply chain, secrets and agentic pentesting)	Nullify autonomous product-security agents (find-to-fix with merge-ready PRs and AI Pentest Agent)	Fleuret agentic AI pentesting (Émile multi-agent orchestrator for web apps and APIs)	Penetrify AI penetration testing agent (automated web app and API pentests)	Ares Cyber agentic AI security testing platform (autonomous exploit chaining and runtime verification across SAST, SCA, DAST, VA and pentest)	RaonSecure OneSOAR (AI autonomous security control tower) and OneHacker (AI pentester) from the ONE AI agentic platform	Takumi byGMO security AI agent (AI-SAST/AI-DAST diagnosis, automatic fix pull requests and AI penetration testing)	Cytix agentic pentesting and automatic change approvals (change-driven software security)	SQUR Autonomous Pentest (24-hour AI web and API pentesting with exploit verification)	Filigran XTM One (CTEM AI agents and autonomous attack chaining for OpenCTI and OpenAEV)	CodeWall autonomous attack agents (continuous external adversarial testing)	Beelzebub Arcangelo (IASM/EASM with agentic penetration testing)	Amnify security agents (agent-driven code audit, AI pentesting, PR review and autofix pull requests)	noze CyberAgent (AI agent for continuous attack-surface monitoring, automated validation pentesting and NIS2 evidence)	Pentera AI-powered exposure validation (automated pentesting with AI-guided attack execution)	Vulnetic Sable (AI pentesting agent)
Vendor	Hadrian	Escape	Equixly	Ethiack	Intruder	Horizon3.ai	RunSybil	Amazon Web Services	YesWeHack	Patrowl	Synack	Aikido Security	Simbian	Swipergy (Swipergy GmbH)	Check Point Software Technologies	Ridge Security (Ridge Security, Inc.)	Edgescan (BCC Risk Advisory Limited)	depthfirst (DepthFirst AI, Inc.)	Nullify (Nullify Holdings Pty Ltd)	Fleuret (FLEURET AI SAS)	Penetrify (Algofy, s.r.o.)	Ares Cyber (Ares Cyber S.r.l.)	RaonSecure (라온시큐어)	GMO Flatt Security (GMO Flatt Security株式会社)	Cytix (Cytix Ltd)	SQUR (SQUR UG (haftungsbeschränkt))	Filigran (Filigran SAS)	CodeWall (CodeWall Ltd)	Beelzebub (Beelzebub S.r.l.)	Amnify (Amnify GmbH)	noze (noze S.r.l.)	Pentera (Pentera Security Ltd.)	Vulnetic (Vulnetic Inc.)
HQ	Netherlands · Europe	France · Europe	Italy · Europe	Portugal · Europe	United Kingdom · Europe	United States · North America	United States · North America	United States · North America	France · Europe	France · Europe	United States · North America	Belgium · Europe	United States · North America	Germany · Europe	Israel · Middle East	United States · North America	Ireland · Europe	United States · North America	Australia · Australia and New Zealand	France · Europe	Czech Republic · Europe	Italy · Europe	South Korea · Asia Pacific	Japan · Asia Pacific	United Kingdom · Europe	Germany · Europe	France · Europe	United Kingdom · Europe	Italy · Europe	Germany · Europe	Italy · Europe	Israel · Middle East	United States · North America
Primary category	Security	Code security	Security	Security	Security	Security	Security	Security	Security	Security	Security	Security	Security	Security	Security	Security	Security	Code security	Code security	Security	Security	Security	Security	Code security	Code security	Security	Security	Security	Security	Code security	Security	Security	Security
Also listed in	Security, Code security	Code security, Security	Security, Code security	Security	Security, Code security	Security	Security, Code security	Security, Code security	Security	Security	Security	Security, Code security	Security	Security	Security	Security	Security	Code security, Security	Code security, Security	Security	Security	Security, Code security	Security	Code security, Security	Code security, Security	Security, Code security	Security	Security	Security	Code security, Security	Security, Compliance	Security	Security
Summary	On-demand penetration testing run by a fleet of AI hacker agents, paired with Hadrian Atlas for continuous external exposure management.	Offensive security platform using AI agents for attack surface discovery, business-logic DAST and multi-agent pentesting (Cascade) of APIs and web apps.	Italian offensive-security platform whose agentic AI hacker continuously maps APIs and applications, chains API interactions to find exploitable flaws, and validates findings for remediation.	Portuguese autonomous pentesting platform: the Hackian agentic AI maps the attack surface, runs exploitation routines, chains attack paths and delivers proof-of-exploit with compliance-ready reports.	On-demand, code-aware web-app pentesting by AI agents built by Intruder's CREST-certified testers, with audit-ready reports in hours and issue-level 'micro pentests' to triage scanner findings.	Autonomous pentesting platform that runs unlimited self-directed internal, external, cloud, Kubernetes and AD pentests, plans attack paths, guides remediation and re-tests to verify fixes.	AI offensive security platform whose agents run black- or white-box autonomous pentests, chain vulnerabilities across code, APIs, cloud and infrastructure, reproduce every finding, and re-test on each deployment.	AWS frontier agent (formerly AWS Security Agent) that runs on-demand penetration tests of your applications with tailored multi-step attack scenarios, reproducible proof and ready-to-implement fixes, billed per task-hour.	On-demand pentests of external attack surface run by AI agents shaped by YesWeHack's bug-hunting expertise, with dedicated verification agents, a Pentest Manager, same-day results and reports in its vulnerability-management platform.	Continuous external pentesting in which Patrowl's AI agents correlate assets, threats and past evidence, choose the next test step every day, and route every finding through a certified pentester before it reaches you.	Synack's Autonomous Red Agent (Sara) for agentic pentesting, with exploitable findings validated by the Synack Red Team.	Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report.	An autonomous AI agent for on-demand, ongoing penetration testing that adapts its testing logic in real time and focuses findings on each customer's business context, developed with LRQA's pentesting methodology.	German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing.	Part of Check Point Exposure Management, launched May 28, 2026. AI agents reason like attackers across an organisation's external attack surface, correlating exposures, leaked credentials, CVE and live exploit research with existing protection coverage, then safely prove, pivot on, or discard each finding, so teams get evidence of what is actually exploitable.	Offensive-security vendor from Milpitas, California. Its on-premises, model-agnostic RidgeGen agent does agentic AI red teaming: it reasons through multi-step attack chains to find business-logic and non-CVE risks, verifies every finding with reproducible exploit evidence, gives fix guidance and re-runs to confirm fixes. It sits alongside RidgeBot automated pentesting.	Autonomous penetration testing built into the Dublin-based Edgescan platform, launched October 7, 2026. A team of narrow AI agents plans, adapts, chains vulnerabilities and validates real impact on web applications, using Edgescan's existing asset context and findings, while a deterministic 'Harness' enforces scope, permissions, approvals and allowed actions. Findings land alongside Edgescan's DAST, PTaaS and ASM results.	San Francisco application-security platform whose autonomous AI agents trace business logic and data flows to find exploitable code vulnerabilities, check dependency reachability and secrets, review pull requests with proposed fixes, and run agentic pentests against running applications, re-running each attack after a fix merges to confirm it is closed.	Australian 'autonomous system of agents' for product security that covers code, secrets, API pentesting and exploit validation. It proves findings with reproducible evidence, scores them against the customer's assets, writes merge-ready fix PRs routed to code owners, and runs remediation campaigns through Jira and Slack until merge, with the customer keeping final merge approval.	Paris-based agentic pentesting platform in which the Émile orchestrator coordinates 12-60 specialist attack agents (auth bypass, IDOR, injection chains, business logic, privilege escalation) against web apps and APIs, reports only findings proven with a replayable proof of concept, and re-tests fixes, with EU-sovereign hosting.	Self-serve automated pentesting from Brno in which an AI agent maps a web app's attack surface, forms hypotheses, chains findings into multi-step attack scenarios (auth bypass, broken access control, exposed secrets) and writes up only what it can demonstrate, with published monthly plans and EU/GDPR data processing.	Rome security-testing platform that runs SAST, SCA, IaC/secrets, DAST, vulnerability assessment and penetration testing as one pipeline, in which AI agents autonomously chain vulnerabilities and safely run exploits to prove which findings are exploitable, available as SaaS, self-hosted or an air-gapped appliance.	Seoul security and authentication vendor's agentic AI products: OneSOAR runs security operations from natural-language commands, automates account changes for joiners, movers and leavers, and on detecting anomalous behaviour immediately executes autonomous defence such as account lock, session termination, MFA step-up and admin alerts; OneHacker runs continuous, autonomous AI penetration tests from Pentest-Graph scenarios with white-hacker verification.	Japanese security AI agent that continuously finds vulnerabilities with AI-SAST and AI-DAST (including logic, authentication and authorisation flaws), generates fix patches and opens pull requests with unit tests, and runs AI penetration tests that actually attempt intrusion to prove exploitability.	Manchester software-change security platform that risk-scores every code change, automatically approves changes that fall within the customer's own policy and escalates the rest, then sends sandboxed AI pentest agents against high-risk changes and logs every decision and tool call as an audit-ready change record.	German autonomous pentesting product for web apps and APIs: given a target URL, scope and optional source code, its AI agents carry out real exploitation, a separate agent re-tests every finding against the live app to weed out false positives, and a compliance-ready report with proof-of-exploit and remediation steps arrives within 24 hours; continuous monthly runs mark findings fixed, regressed or new.	Agentic AI layer for Filigran's open-source threat-intelligence (OpenCTI) and exposure-validation (OpenAEV) platforms: pre-built agents turn threat intelligence into hunting packages, detection rules and attack scenarios, and an autonomous attack-chaining orchestrator plans, runs and adapts an AI penetration test against an authorized environment, with optional human approval for sensitive actions.	UK offensive-security product that deploys autonomous attack agents starting from the outside with no credentials or source code: specialist agents investigate in parallel, share discoveries on a persistent investigation graph, prove exploitable paths across applications, identities and data, and retest within authorised scope as the environment changes.	Italian AI-native offensive platform product: Arcangelo continuously maps internal and external attack surfaces, then runs adaptive multi-stage agentic penetration tests that plan and pivot like an attacker, with potentially intrusive exploitation kept human-approved and auditable.	German AppSec product from Düsseldorf: a team of agents audits repositories (SAST, secrets, SCA, IaC, CI/CD) and cloud accounts, triages signals so only confirmed findings surface, pentests running apps inside a verified scope with a separate agent reproducing every finding, reviews pull requests with a merge-blocking status check, and opens fix pull requests that run your tests but never merge themselves.	Italian agent for mid-sized companies and NIS2 entities without an in-house SOC: after verifying domain control it continuously discovers assets and assesses network, web apps and APIs, correlates findings with EPSS and CISA KEV, confirms exploitability with automated validation pentests, ranks risks by business impact and prepares NIS2, DORA and ISO 27001 reports; the team decides what to fix.	Security-validation platform that continuously runs automated, production-safe pentests across internal networks, the external attack surface, cloud and identity, web apps and APIs. AI guides attack execution in real time (adapting techniques, generating payloads, chaining exploits) while Pentera's deterministic engine keeps every action controlled and auditable; users can approve or stop execution within guardrails, and Pentera Resolve turns validated findings into automated remediation workflows.	Agentic pentesting agent for internal security teams and MSSPs. Sable plans and executes authorised tests against web applications, APIs, internal networks and Active Directory, runs real tools, proves impact with reproducible evidence and exploit traces, and supports targeted retests after remediation; teams steer it in plain language and can approve every command or let it run fully autonomously.
Frameworks (vendor-stated)	SOC 2, ISO 27001, DORA	—	—	—	—	—	—	—	—	—	—	—	—	DORA	—	—	—	—	—	—	—	—	—	—	—	—	—	—	—	—	—	—	—
Frameworks (vendor-claimed)	SOC 2, ISO 27001, NIS2, DORA, MITRE ATT&CK	—	—	—	—	FedRAMP	—	—	—	—	FedRAMP, TX-RAMP	—	—	DORA TLPT, TIBER-EU	—	—	—	—	—	—	—	ISO 27001, SOC 2, PCI DSS, GDPR	—	ISO 27001 (ISMS certification, vendor claim)	—	ISO 27001, SOC 2	SOC 2, ISO 27001	—	ISO 27001	—	NIS2, DORA, ISO 27001	—	—
Capabilities / tasks	pen test management, attack surface, exposure management, appsec	appsec, pen test management, attack surface	pen test management, appsec, attack surface	pen test management, attack surface, exposure management	pen test management, appsec, vulnerability management	pen test management, attack surface, exposure management, vulnerability management	pen test management, attack surface, appsec, vulnerability management	pen test management, appsec, vulnerability management, remediation	pen test management, attack surface, appsec, vulnerability management	pen test management, attack surface, vulnerability management, exposure management	pen test management, attack surface, vulnerability management, exposure management	pen test management, appsec, attack surface, vulnerability management	pen test management, attack surface, vulnerability management, exposure management	pen test management, attack surface, vulnerability management, remediation	attack surface, exposure management, pen test management, vulnerability management, threat intelligence	pen test management, attack surface, vulnerability management, exposure management	pen test management, attack surface, vulnerability management, appsec, exposure management	appsec, sast, sca, secrets detection, pr review, remediation, pen test management	appsec, sast, sca, secrets detection, remediation, vulnerability management, pen test management	pen test management, attack surface, vulnerability management, exposure management	pen test management, attack surface, vulnerability management	pen test management, attack surface, vulnerability management, appsec, sast, sca	security operations, incident response, threat detection, identity governance, pen test management, attack surface	appsec, sast, remediation, pr review, pen test management, vulnerability management	pen test management, appsec, risk assessment, workflow automation	pen test management, appsec, vulnerability management, attack surface	threat intelligence, pen test management, exposure management, threat detection	pen test management, attack surface, exposure management, appsec	pen test management, attack surface, exposure management, threat intelligence	appsec, sast, sca, secrets detection, iac, pr review, remediation, pen test management, cloud security	attack surface, vulnerability management, pen test management, risk prioritization, evidence collection	pen test management, exposure management, attack surface, remediation	pen test management, vulnerability management
Pricing (as published)	Nova: from EUR 1,250 per test excluding VAT, bundles available; Atlas priced on total asset count (hadrian.io/pricing).	Quote-based	Penetration Test: €4,999 per test (results in 2 days, blackbox/greybox, full audit report). Continuous Equixly Platform: custom pricing (equixly.com/pricing).	Published on ethiack.com/pricing: on-demand pentest €3,000 per test; Continuous 'Core' €9,000/year (shown as 25% off €12,000); Enterprise custom. Guarantee offer: free of charge unless a validated, proven-exploitable vulnerability is found.	AI web-app pentests start from $3,500 per test; the scanning platform has a free-forever plan and paid monthly/annual tiers (intruder.io/pricing).	Not published	Not published	$50.00 per task-hour (metered per second; concurrent tasks add up, so billable task-hours usually exceed wall-clock time). First three revalidations per finding are free; a free trial is offered (aws.amazon.com/continuum/pricing).	Not published	Not published	Published: Synack's pricing page lists pricing starting at $4,181 for one AI Sara Pentest (standard pricing; check the vendor page for current amounts).	Published: aikido.dev/pricing lists a free Developer tier and paid tiers that include monthly credits (for example 100 or 200 per month) usable for AI pentesting, plus a separate Pentest pricing tab. Check the vendor page for current amounts.	Published on simbian.ai/ai-pentest-agent: Standard $4,000 per pentest; Premium $8,000 per pentest; Custom by quote. Vendor page says up to five retests are included. Deployment modes in the launch release: SaaS, Dedicated SaaS and on-premises.	Not published	Not published	Not published	Not published. Atomic runs on Atomic Attack Credits assigned per asset in the Edgescan platform; pricing by quote/demo.	Not published	Not published. Nullify says it prices on work performed (scoped program and estimated volume), not seats or license tiers.	Published on fleuret.ai: free organisation plan (scanners only, 2 users, 10 repositories); one-off pentest EUR 4,000 per web app; contract covering every app on quote.	Published on penetrify.cloud: Starter USD 100/month (1 pentest), Growth USD 900/month (10), Professional USD 1,700/month (20), Business USD 4,000/month (50), Enterprise USD 7,500/month (100); annual billing saves 20%; first scan USD 29 credited to a plan.	Not published (Basic, Pro, Enterprise and Air-Gapped plans priced on request, billed annually; free trial offered)	Not published	Published on flatt.tech/takumi: base fee JPY 70,000/month (excl. tax) including 250 credits shared across diagnosis, auto-fix and AI pentest, 15 Takumi Guard users and Runner minutes; overage JPY 280 per credit; a 30-day AI penetration test offer at JPY 980,000 (excl. tax, through end of 2026).	Not published	Published on squr.ai/pricing: Compliance Pentest EUR 1,995 one-time per web app/API (24h, free retest); Professional continuous EUR 995 per app per month; bulk credits EUR 1,495 per pentest for 10+ apps; free attack-surface scan.	Not published (pre-packaged agents included for OpenCTI/OpenAEV Enterprise Edition customers with a usage quota; advanced XTM One capabilities licensed separately; 30-day trial and free open-source MCP server)	Not published	Not published	Published credit-based plans (amnify.ai/pricing, checked 2026-10-21): Free €0 (30 credits, 7 days, 1 repo, 1 cloud account); Starter €192/month (200 credits, 10 repos); Team €460/month (500 credits, 50 repos, 3 cloud accounts); Business €880/month; Enterprise on request. Extra credits €1 each. Each review, audit or pentest costs credits; no per-seat fees.	From €99/month (Starter); Business and Enterprise tiers differ by monitored assets, scan frequency and included automated pentesting; optional pay-per-scan (noze.it product page, checked 2026-10-21). Higher-tier prices not published.	Not published	Not published on the pages we could read on 2026-10-21 (check the vendor pricing section)
Pricing model	published-tiers	quote	published-tiers	published-tiers	published-tiers	quote	quote	published-tiers	quote	quote	published-tiers	published-tiers	published-tiers	quote	quote	quote	quote	quote	quote	published-tiers	published-tiers	quote	quote	published-tiers	quote	published-tiers	quote	quote	quote	freemium	published-tiers	quote	quote
Primary source	https://hadrian.io/products/nova	https://escape.tech/blog/introducing-cascade-the-multi-agent-penetration-testing/	https://equixly.com/	https://ethiack.com/	https://www.intruder.io/platform/ai-pentesting	https://horizon3.ai/nodezero/	https://www.runsybil.com/solutions/autonomous-penetration-testing	https://aws.amazon.com/continuum/	https://www.yeswehack.com/product/agentic-pentest	https://patrowl.io/en/agentic-ai-penetration-testing	https://www.synack.com/platform/ai-pentesting/	https://www.aikido.dev/attack/aipentest	https://simbian.ai/ai-pentest-agent	https://www.aipentix.com/en/	https://www.checkpoint.com/solutions/agentic-exposure-validation/	https://ridgesecurity.ai/ridgegen/	https://www.edgescan.com/introducing-edgescan-atomic/	https://depthfirst.com/	https://www.nullify.ai/	https://fleuret.ai/platform	https://www.penetrify.cloud/en/	https://ares-cyber.ai/	https://www.raon.com/en/solution/onesoar	https://flatt.tech/takumi	https://cytix.io/solutions/agentic-pentesting	https://squr.ai/	https://filigran.io/products/xtm-one	https://codewall.ai/	https://beelzebub.ai/products/arcangelo/	https://amnify.ai/	https://www.noze.it/en/products/cyberagent/	https://pentera.io/ai-powered-exposure-validation/	https://www.vulnetic.ai/ai-pentesting-agent
Last checked	2026-10-19	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-19	2026-10-19	2026-10-19	2026-10-19	2026-10-19	2026-10-19	2026-10-20	2026-10-20	2026-10-20	2026-10-20	2026-10-20	2026-10-20	2026-10-20	2026-10-20	2026-10-20	2026-10-20	2026-10-21	2026-10-21	2026-10-21	2026-10-21
Official site	https://hadrian.io/products/nova	https://escape.tech/	https://equixly.com/	https://ethiack.com/	https://www.intruder.io/platform/ai-pentesting	https://horizon3.ai/nodezero/	https://www.runsybil.com/solutions/autonomous-penetration-testing	https://aws.amazon.com/continuum/	https://www.yeswehack.com/product/agentic-pentest	https://patrowl.io/en/agentic-ai-penetration-testing	https://www.synack.com/platform/ai-pentesting/	https://www.aikido.dev/attack/aipentest	https://simbian.ai/ai-pentest-agent	https://www.aipentix.com/en/	https://www.checkpoint.com/solutions/agentic-exposure-validation/	https://ridgesecurity.ai/ridgegen/	https://www.edgescan.com/the-platform/atomic-autonomous-penetration-testing-edgescan/	https://depthfirst.com/	https://www.nullify.ai/	https://fleuret.ai/	https://www.penetrify.cloud/en/	https://ares-cyber.ai/	https://www.raon.com/en/solution/onesoar	https://flatt.tech/takumi	https://cytix.io/	https://squr.ai/	https://filigran.io/products/xtm-one	https://codewall.ai/	https://beelzebub.ai/products/arcangelo/	https://amnify.ai/	https://www.noze.it/en/products/cyberagent/	https://pentera.io/ai-powered-exposure-validation/	https://www.vulnetic.ai/ai-pentesting-agent

Side-by-side data is generated from the open dataset. “Vendor-claimed” frameworks are as marketed by each vendor and not verified by Agent Index; framework tags indicate relevance, not certification. Request current quotes from each vendor before buying. This page does not rank or score vendors. Sponsored comparisons, if any, will be labelled.

Use-case comparisons

AI SOC and security-analyst agents — 51 listings (Security operations, alert investigation and threat detection)
AI code security agents — 33 listings (Application security scanning, suggested or automated code fixes, and pull-request security review)