Ranking across industries

Top 10 AI tools to find security vulnerabilities

Test code, applications, cloud systems, or agents to discover exploitable weaknesses before they are abused. We reviewed 106 products from 70 companies on a 100-point evidence score. These 10 earned a place.

Updated Nov 10, 2026106 products reviewed70 companies

  1. 1=

    Pentesting Agent

    by Tolmo

    Autonomous offensive security, run from inside your stack.

    Task fit
    45/45
    Industry fit
    20/20
    Adoption
    Unknown
    Submit evidence
    Customer satisfaction
    Unknown
    Submit evidence
    Value signals
    Unknown
    Submit evidence
    Popularity
    Unknown
    Submit evidence
  2. 1=

    AI Pentesting

    by OpenHack, Inc.

    Autonomous pentesting that validates findings with working proof-of-concept exploits and reproduces issues in a sandbox or browser.

    Free planCustom pricing

    Task fit
    45/45
    Industry fit
    20/20
    Adoption
    Unknown
    Submit evidence
    Customer satisfaction
    Unknown
    Submit evidence
    Value signals
    Unknown
    Submit evidence
    Popularity
    Unknown
    Submit evidence
  3. 1=

    Recursion

    by Labelbox

    RL platform for developing, evaluating, and deploying specialist AI models that improve from real enterprise execution.

    Task fit
    45/45
    Industry fit
    20/20
    Adoption
    Unknown
    Submit evidence
    Customer satisfaction
    Unknown
    Submit evidence
    Value signals
    Unknown
    Submit evidence
    Popularity
    Unknown
    Submit evidence
  4. 1=

    Trident

    Trident is an AI-powered security platform for continuous web and API penetration testing and cloud attack-path analysis across AWS, Azure, and GCP.

    Task fit
    45/45
    Industry fit
    20/20
    Adoption
    Unknown
    Submit evidence
    Customer satisfaction
    Unknown
    Submit evidence
    Value signals
    Unknown
    Submit evidence
    Popularity
    Unknown
    Submit evidence
  5. 1=

    Veria AI

    by Veria Labs, Inc.

    Autonomous penetration testing product that maps attack surfaces, proves real exploits against staging, posts findings to Slack and Linear, opens automatic patches, and performs...

    Task fit
    45/45
    Industry fit
    20/20
    Adoption
    Unknown
    Submit evidence
    Customer satisfaction
    Unknown
    Submit evidence
    Value signals
    Unknown
    Submit evidence
    Popularity
    Unknown
    Submit evidence
  6. 1=

    Winfunc Scanner

    by winfunc

    Autonomous AI agents that audit your codebase, prove vulnerabilities with executable exploits, and deliver fixes as pull requests.

    Free trialFrom $500

    Task fit
    45/45
    Industry fit
    20/20
    Adoption
    Unknown
    Submit evidence
    Customer satisfaction
    Unknown
    Submit evidence
    Value signals
    Unknown
    Submit evidence
    Popularity
    Unknown
    Submit evidence
  7. 7

    ZeroPath

    AI-Native SAST & AppSec Platform - unifies SAST, SCA, secrets detection, IaC security, PR reviews, policy engine, risk management, and AI agent workflow orchestration.

    From $1,000/month

    Task fit
    35.8/45Partial evidence
    Industry fit
    20/20
    Adoption
    6.3/12
    Customer satisfaction
    2.7/10
    Value signals
    Unknown
    Submit evidence
    Popularity
    Unknown
    Submit evidence
  8. 8

    Adlumin

    by N-able

    SecOps experts managing your security toolset.

    Task fit
    35.8/45Partial evidence
    Industry fit
    20/20
    Adoption
    5.5/12
    Customer satisfaction
    0.7/10
    Value signals
    Unknown
    Submit evidence
    Popularity
    Unknown
    Submit evidence
  9. 9

    Terracotta AI

    AI-powered infrastructure intelligence platform that runs 12 automated checks on every Terraform, Terragrunt, and Kubernetes pull request: cost estimation, drift detection, secu...

    Free planFrom $49/seat/month

    Task fit
    35.8/45Partial evidence
    Industry fit
    20/20
    Adoption
    5/12
    Customer satisfaction
    0.7/10
    Value signals
    Unknown
    Submit evidence
    Popularity
    Unknown
    Submit evidence
  10. 10

    Canary

    AI QA engineer that analyzes code diffs, generates tests, runs them in real browsers in parallel, and reports results with session replays before pull requests are merged.

    Task fit
    38.3/45Partial evidence
    Industry fit
    20/20
    Adoption
    Unknown
    Submit evidence
    Customer satisfaction
    Unknown
    Submit evidence
    Value signals
    Unknown
    Submit evidence
    Popularity
    Unknown
    Submit evidence

106 candidate products reviewed. Products with equal totals share a rank. Evidence samples are selected examples of the available support.