Agentic Radar

Security scanner for AI agentic workflows and MCP servers

Agentic Radar is an open-source CLI security scanner that maps attack surfaces in agentic AI workflows. It detects MCP servers, visualizes agent tool chains, and validates against OWASP LLM Top 10 vulnerabilities including prompt injection and excessive agency. Supports scanning CrewAI, LangGraph, AutoGen, and Semantic Kernel pipelines. Built by SPLX AI with active development and MCP-specific detection capabilities added for the growing MCP ecosystem.

Rate

Website

Is this your product? →

About Agentic Radar

As AI agents gain more autonomy and tool access, securing agentic workflows becomes critical. Agentic Radar scans your agent pipeline code and produces a visual map of all tools, data flows, and external connections — making it easy to identify where prompt injection could manipulate behavior, where excessive permissions grant agents unnecessary access, and where sensitive data might leak through tool chains. The scanner understands the specific patterns of popular frameworks.

MCP server detection is a standout feature: Agentic Radar identifies all MCP servers in your configuration, maps their exposed tools and resources, and flags potential security issues like overly broad file system access, unvalidated SQL execution, or authentication gaps. As the MCP ecosystem grows with hundreds of community-built servers, this automated security review becomes essential for any team integrating third-party MCP capabilities.

The tool is open-source and actively maintained by SPLX AI. It runs as a CLI with HTML report output showing interactive diagrams of your agent architecture. Support for CrewAI, LangGraph, AutoGen, and Semantic Kernel covers the major agent frameworks, with more being added. For teams building production agent systems, Agentic Radar provides the security audit layer that is otherwise completely manual and error-prone.

Pricing & Platform Specs

Pricing Summary

100% free and open source under the Apache-2.0 license ($0 software cost). Agentic Radar is an open-source automated security testing and vulnerability scanner for AI agents and LLM applications with zero licensing fees.

full pricing breakdown →

Supported Platforms

CLI (Python), HTML report output

Explore categories, tags & use cases

Use Cases

Security Auditing Cost Optimization

Alternatives

All Agentic Radar alternatives →

garak

NVIDIA's LLM vulnerability scanner and red-teaming tool

garak is NVIDIA's open-source LLM vulnerability scanner for red-teaming AI models and applications. Probes for prompt injection, data leakage, hallucination, toxicity, encoding-based attacks, and dozens of other vulnerability categories. Runs automated attack sequences against any LLM endpoint and generates detailed vulnerability reports. Features a modular probe/detector architecture that is extensible with custom attack patterns. Named after the Star Trek character known for deception.

freeOpen Source

Mindgard

Automated AI security testing and red teaming platform

Mindgard is an automated AI security testing platform that provides continuous red teaming for machine learning models and LLM applications. It detects vulnerabilities including adversarial attacks, prompt injection, data poisoning, and model extraction through systematic probing. Offers end-to-end testing across the AI lifecycle with enterprise compliance reporting and integration into CI/CD pipelines.

paid

Shannon

Autonomous AI pentester for web apps and APIs

Shannon is an autonomous white-box AI pentesting tool for web applications and APIs. It analyzes authorized source code, identifies attack vectors, attempts proof-by-exploitation, and produces remediation-ready reports. Shannon Lite is AGPL-3.0 for local use, while Shannon Pro is the commercial Keygraph platform for continuous security testing.

freemiumOpen Source

Discover more tools in this category

Related Tools

computed discovery: shared active categories

OpenLIT

OpenTelemetry-native observability for LLM applications with evals and GPU monitoring

OpenLIT is an open-source AI engineering platform that provides OpenTelemetry-native observability for LLM applications. It combines distributed tracing, evaluation, prompt management, a secrets vault, and GPU telemetry in a single self-hostable stack. With 50+ integrations across LLM providers and frameworks, it lets teams monitor AI applications using their existing observability backends like Grafana, Datadog, or Jaeger.

Open Source

Cilium

eBPF-based networking, security, and observability for Kubernetes

Cilium is a CNCF Graduated, Apache-2.0 project for Kubernetes networking, security, and observability using eBPF. It can replace kube-proxy, enforce identity-aware L3-L7 network policies, and add Hubble flow observability plus Tetragon runtime-security signals. Current source checks support GKE Dataplane V2 using Cilium/eBPF and Azure CNI Powered by Cilium for AKS.

Open Source

MCP-Scan

Security scanner for MCP servers against tool poisoning attacks

MCP-Scan is a security tool that scans MCP servers for vulnerabilities including tool poisoning, prompt injection, cross-origin escalation, and rug pull attacks. Acquired by Snyk in 2026, it is the first dedicated security scanner for the MCP ecosystem. It analyzes tool descriptions, permissions, and behavior patterns to detect malicious or compromised MCP servers before they can exploit AI agents.

Open Source

Pangolin

Identity-aware VPN and reverse proxy for zero-trust remote access

Identity-based remote access platform built on WireGuard that combines reverse proxy and VPN capabilities. Pangolin supports clientless browser access for web apps and client-based private-resource access across macOS, iOS, Windows, Linux, and Android, with zero-trust rules, peer-to-peer tunnels, automatic SSL, SSO/OIDC options, and cloud or self-hosted deployment.

freemium

Semgrep

Fast open-source SAST with custom rules

Semgrep is an AppSec platform with a widely used open-source engine for readable code rules plus commercial SAST, supply-chain and secrets workflows. Current product positioning emphasizes AI-assisted detection, triage and remediation, CI/pull-request integration and managed governance for security teams.

freemiumOpen Source

SonarQube

Code quality and security analysis platform

SonarQube is an open-source code quality and security platform with 10K+ GitHub stars that inspects code for bugs, vulnerabilities, code smells, and security hotspots. It enforces quality gates in CI/CD pipelines, supports 30+ languages in Team plans and 40+ in Enterprise, and remains the industry standard for static code quality management.

freemiumOpen Source

Community experience

Sources & verification

Agentic Radar Official Documentation & Repository

Sources checked: September 5, 2026
Content verified: September 6, 2026

Verification dates are editorial checks. Routine CMS saves and automatic updatedAt timestamps do not advance them.

FAQ

What is Agentic Radar?

Is Agentic Radar free?

Yes — Agentic Radar is open source and free to use. 100% free and open source under the Apache-2.0 license ($0 software cost). Agentic Radar is an open-source automated security testing and vulnerability scanner for AI agents and LLM applications with zero licensing fees.

Is Agentic Radar open source?

Yes — Agentic Radar is open source.

Is Agentic Radar still maintained?

Yes — Agentic Radar is active. Its listing was last verified on September 6, 2026.

What are the best Agentic Radar alternatives?

The first editor-selected Agentic Radar alternatives are garak, Mindgard, Shannon.

Agentic Radar

About Agentic Radar

Pricing & Platform Specs

Pricing Summary

Supported Platforms

Categories

Tags

Use Cases

Alternatives

garak

Mindgard