Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) alternatives
Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) is listed under Security. These 100 agents share at least one category with it, ordered by number of shared framework tags, then category (a relevance order, not a ranking).
All category-sharing alternatives
| Agent | Category | Shared framework tags | Compare |
|---|---|---|---|
 7AI agentic security platform Boston-based agentic security platform where swarms of specialised AI agents categorise, investigate and reach a determination on every alert, escalating only what needs a person, with optional managed service (PLAID ELITE). | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs 7AI agentic security platform |
 Abnormal AI Security Mailbox (Abnormal AI for Government) Autonomous agent for email security operations that triages user-reported emails, removes related malicious campaign messages across the organisation and replies to reporters; included in Abnormal AI for Government, which is FedRAMP and GovRAMP Moderate authorized. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Abnormal AI Security Mailbox (Abnormal AI for Government) |
 Adaptive Security Agentic Email Security and Phish Triage API-based 'agentic email security' that re-analyses inbound mail after native filtering with ML and LLM reasoning and removes confirmed threats across every inbox automatically (configurable human-in-the-loop thresholds). AI Phish Triage classifies employee-reported emails and acts on them, feeding Adaptive's simulations and awareness training. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Adaptive Security Agentic Email Security and Phish Triage |
 Aikido Attack AI Pentesting Belgian autonomous AI pentest: many agents map the app, test attack paths and re-exploit each finding to confirm it, with a same-day audit-grade report. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Aikido Attack AI Pentesting |
| A Andesite Human-AI SOC (Azimuth for Government) Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Andesite Human-AI SOC (Azimuth for Government) |
 Attic IVON (Agentic MDR for Microsoft 365) Dutch AI SOC agent for Microsoft 365 SMBs that triages, investigates and contains identity alerts across Defender, Sentinel and Entra ID with human sign-off. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Attic IVON (Agentic MDR for Microsoft 365) |
 AWS Continuum for penetration testing (formerly AWS Security Agent) AWS frontier agent (formerly AWS Security Agent) that runs on-demand penetration tests of your applications with tailored multi-step attack scenarios, reproducible proof and ready-to-implement fixes, billed per task-hour. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs AWS Continuum for penetration testing (formerly AWS Security Agent) |
 Check Point Email Security AI agents (Harmony Email & Collaboration, formerly Avanan) Check Point's API-based, prevention-first email and collaboration security (Harmony Email & Collaboration, formerly Avanan) for Microsoft 365, Gmail, Teams, Slack and file-sharing apps. Check Point says autonomous AI agents investigate threats, correlate activity into campaigns, prioritise incidents and orchestrate remediation. Check Point Infinity Platform for Government (which includes Harmony Email) is FedRAMP Moderate and GovRAMP Authorized at platform level; Check Point Harmony is TX-RAMP Level 2 — none of those registry rows name the AI agents. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Check Point Email Security AI agents (Harmony Email & Collaboration, formerly Avanan) |
 CloudSEK AI Agents Predictive attack-path platform whose AI agents correlate digital-risk, attack-surface and threat signals into validated paths, plus AIVigil for exposed AI and agentic workflows. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs CloudSEK AI Agents |
 Conveyor Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Conveyor |
| Palo Alto Networks' agentic layer for Cortex: prebuilt and custom security agents that investigate and resolve cloud and SOC issues across Cortex Cloud, XSIAM and XDR, with configurable autonomy and approvals. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR) |
 CrowdStrike Charlotte AI Agentic AI analyst for cybersecurity within the CrowdStrike Falcon platform, assisting detection, investigation and response workflows. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs CrowdStrike Charlotte AI |
 Cyble Blaze AI Multi-agent cybersecurity engine across Cyble's threat-intelligence, endpoint and cloud products: agents hunt, correlate IOCs, isolate endpoints, block domains and draft reports, with human-in-the-loop guardrails. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Cyble Blaze AI |
 D3 Morpheus (agentic AI SOC platform) Agentic SOC platform that autonomously triages, investigates and responds across the full alert lifecycle, grading every verdict by its evidence and deferring to a human when uncertain. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs D3 Morpheus (agentic AI SOC platform) |
 Darktrace Cyber AI Analyst Purpose-built agentic AI that autonomously investigates security alerts, tests hypotheses and produces natural-language incident reports for SOC teams. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Darktrace Cyber AI Analyst |
| AI agent in Datadog Cloud SIEM that autonomously investigates security signals and returns evidence-backed Benign or Suspicious verdicts. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Datadog Bits AI Security Analyst |
 Dropzone AI SOC Analyst AI agents for the SOC: an AI SOC Analyst that investigates alerts end to end and shows its reasoning, plus an AI Threat Hunter and AI Threat Intel Analyst. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Dropzone AI SOC Analyst |
 Equixly Agentic AI Hacker (continuous API pentesting) Italian offensive-security platform whose agentic AI hacker continuously maps APIs and applications, chains API interactions to find exploitable flaws, and validates findings for remediation. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Equixly Agentic AI Hacker (continuous API pentesting) |
 Ethiack Hackian (agentic AI pentesting) Portuguese autonomous pentesting platform: the Hackian agentic AI maps the attack surface, runs exploitation routines, chains attack paths and delivers proof-of-exploit with compliance-ready reports. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Ethiack Hackian (agentic AI pentesting) |
 Exaforce Exabots (agentic SOC) Four role-based AI agents (Detect, Triage, Investigate, Respond) on Exaforce's own security data platform, covering detection engineering, tier-3 triage, threat hunting and playbook-driven response with approval gates. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Exaforce Exabots (agentic SOC) |
 Google Security Operations Triage and Investigation Agent AI agent in Google Security Operations that autonomously investigates SIEM alerts and returns a verdict, confidence score, timeline and next steps. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Google Security Operations Triage and Investigation Agent |
 Hadrian Nova (agentic pentesting) On-demand penetration testing run by a fleet of AI hacker agents, paired with Hadrian Atlas for continuous external exposure management. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Hadrian Nova (agentic pentesting) |
 Horizon3.ai NodeZero (autonomous pentesting) Autonomous pentesting platform that runs unlimited self-directed internal, external, cloud, Kubernetes and AD pentests, plans attack paths, guides remediation and re-tests to verify fixes. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Horizon3.ai NodeZero (autonomous pentesting) |
 Hoxhunt Respond (automated phishing incident response) Finnish human-risk platform whose Respond module automatically investigates every employee-reported email, groups related reports into one campaign incident, suppresses safe and duplicate reports, and removes confirmed malicious messages from all affected inboxes without waiting for an analyst. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Hoxhunt Respond (automated phishing incident response) |
 Imperum Virtus AI SOC agents (Triage, Pilot, Email Phishing) Amsterdam-built autonomous SOC platform whose Virtus agents triage every alert through a 7-stage pipeline, return a verdict with confidence and evidence, and hand cases to an investigation agent, with sovereign/on-prem AI options. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Imperum Virtus AI SOC agents (Triage, Pilot, Email Phishing) |
 Intruder AI Pentesting On-demand, code-aware web-app pentesting by AI agents built by Intruder's CREST-certified testers, with audit-ready reports in hours and issue-level 'micro pentests' to triage scanner findings. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Intruder AI Pentesting |
 KnowBe4 AIDA (AI Defense Agents) Suite of AI agents for human risk management that automatically generate and deliver personalised phishing simulations, training, remedial and policy-quiz content per user; the FedRAMP Moderate KnowBe4 Platform covers AIDA (except AIDA Deepfakes). | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs KnowBe4 AIDA (AI Defense Agents) |
 Lumos Albus (identity governance agent) AI agent built into the Lumos identity governance platform that designs roles, completes access reviews (approve/flag with peer and usage analysis) and investigates identity risk, explaining every decision. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Lumos Albus (identity governance agent) |
 ManageEngine Endpoint Central Zia Agents (EDR Event Triage, Device Investigation and Patch Troubleshooting agents) Prebuilt AI agents in ManageEngine Endpoint Central that triage EDR events (MITRE ATT&CK mapping, prioritized next steps), investigate device problems and diagnose failed patches, plus Agent Studio for custom endpoint agents. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs ManageEngine Endpoint Central Zia Agents (EDR Event Triage, Device Investigation and Patch Troubleshooting agents) |
 ManageEngine Log360 Cloud Zia Agents (Investigation, Alert Correlation and User Activity Review agents) AI agents inside ManageEngine's Log360 Cloud SIEM: an Investigation Agent that runs multi-stage alert investigations and writes an investigation report, prebuilt Alert Correlation and User Activity Review agents, and a no-code Agent Studio for custom SOC agents. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs ManageEngine Log360 Cloud Zia Agents (Investigation, Alert Correlation and User Activity Review agents) |
 Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent) Cloud workspace security for Google Workspace and Microsoft 365 with an AI agent that triages, clusters and remediates user-reported phishing across the organisation, plus an OAuth Remediation Agent that investigates third-party app and AI-agent grants and can revoke tokens on its own. Per-user pricing is published. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Material Security AI agents (user-reported phishing agent and OAuth Remediation Agent) |
 Maze AI Agents (Maze Cloud and Maze Code) UK AI agents that investigate every cloud and code vulnerability with code-to-cloud context, decide exploitability and deliver fixes. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Maze AI Agents (Maze Cloud and Maze Code) |
 Microsoft Entra Conditional Access Optimization Agent Security Copilot agent in Microsoft Entra that scans a tenant for users, apps and agent identities not covered by Conditional Access, recommends or updates policies and applies one-click remediation. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Microsoft Entra Conditional Access Optimization Agent |
 Microsoft Security Copilot Phishing Triage Agent (Defender) Security Copilot agent in Microsoft Defender that autonomously triages user-reported phishing, resolves false positives and explains each verdict. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Microsoft Security Copilot Phishing Triage Agent (Defender) |
 Mindflow AI Agents (agentic SecOps/ITOps automation) No-code agentic automation platform for SecOps, ITOps and CloudOps: mission-oriented AI agents that reason and act across 4,000+ integrations, with RBAC, approval steps and full audit logs. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Mindflow AI Agents (agentic SecOps/ITOps automation) |
 Mondoo Agentic vulnerability management that finds, prioritizes, remediates and verifies fixes with policy-as-code and approval gates. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Mondoo |
 Opal Paladin AI identity agent in Opal that reviews access requests, investigates context and approves, denies or escalates with recorded reasoning. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Opal Paladin |
 Orca Security AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Orca Security |
 Patrowl Agentic AI Penetration Testing Continuous external pentesting in which Patrowl's AI agents correlate assets, threats and past evidence, choose the next test step every day, and route every finding through a certified pentester before it reaches you. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Patrowl Agentic AI Penetration Testing |
 Phished AI security agents (Report Triage, Orchestration, Simulation and Real-Time Protection agents) Belgian human-risk platform with a suite of AI agents that run the phishing training programme (orchestration, simulation, brand, supplier and deepfake simulation agents), triage every reported email with a verdict and a drafted reply, and check clicked links in an isolated environment in real time. New content needs admin approval and every action is logged. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Phished AI security agents (Report Triage, Orchestration, Simulation and Real-Time Protection agents) |
 Plerion Pleri (AI security engineer) Sydney-based cloud and AI security platform with Pleri, an agent that investigates findings, checks real exploitability, raises fix PRs and Jira tickets, and follows each change through to merge. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Plerion Pleri (AI security engineer) |
 Proofpoint Satori agents (Abuse Mailbox Agent and DLP Triage Agent) Agentic AI layer inside Proofpoint's platform. The Satori Abuse Mailbox Agent classifies every user-reported email that needs manual review (phish, malware, spam or clean) and can trigger configured quarantine or tagging workflows. A DLP Triage Agent does the same for data-loss alerts, with guardrails, chat explanations and audit logs. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Proofpoint Satori agents (Abuse Mailbox Agent and DLP Triage Agent) |
 Prophet AI (AI SOC Analyst, Threat Hunter and Detection Engineer agents) Agentic AI SOC platform whose agents investigate every alert end to end, respond through scoped Agent Actions autonomously or with sign-off, hunt threats and tune detections. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Prophet AI (AI SOC Analyst, Threat Hunter and Detection Engineer agents) |
 Qevlar AI Autonomous AI SOC platform that triages, enriches and investigates security alerts across SIEM/XDR, EDR and other tools and returns a documented verdict for analysts. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Qevlar AI |
 Reliance Cyber RADAR UK agentic MDR platform on Google Security Operations with specialist AI agents for detection engineering, triage, response and self-healing, under human oversight. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Reliance Cyber RADAR |
 ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government) Agentic AI security operations platform whose six persona-based Agentic Teammates investigate and triage alerts and execute approved containment actions; GreyMatter for Government is FedRAMP Authorized (Moderate). | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs ReliaQuest GreyMatter Agentic Teammates (GreyMatter for Government) |
 RunSybil Sybil (AI offensive security / autonomous pentesting) AI offensive security platform whose agents run black- or white-box autonomous pentests, chain vulnerabilities across code, APIs, cloud and infrastructure, reproduce every finding, and re-test on each deployment. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs RunSybil Sybil (AI offensive security / autonomous pentesting) |
 SafeBase Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata). | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs SafeBase |
 Securonix Sam, the AI SOC Analyst (Agentic Mesh) An AI SOC analyst built into the Securonix Unified Defense SIEM that triages, correlates and enriches alerts, writes investigation summaries and prepares cases, coordinated by the Agentic Mesh of specialized agents under human approval. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Securonix Sam, the AI SOC Analyst (Agentic Mesh) |
| S Sekoia Elevate (AI SOC agents) Agentic AI SOC analyst inside the Sekoia SOC platform: agents autonomously investigate every alert and case, show their reasoning and produce audit-ready reports for analyst validation. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Sekoia Elevate (AI SOC agents) |
 SentinelOne Purple AI (agentic AI security analyst) Agentic AI security analyst in the Singularity platform that runs alert investigations to a verdict and, with Singularity Hyperautomation, triggers response within pre-approved policies; SentinelOne says Purple AI is FedRAMP High authorized. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs SentinelOne Purple AI (agentic AI security analyst) |
 Simbian AI Pentest Agent An autonomous AI agent for on-demand, ongoing penetration testing that adapts its testing logic in real time and focuses findings on each customer's business context, developed with LRQA's pentesting methodology. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Simbian AI Pentest Agent |
 Snyk Developer-first application security platform; Snyk Agent Fix (formerly DeepCode AI Fix) generates and validates AI-suggested remediations for Snyk Code findings. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Snyk |
 Sophos MDR AI Agents (Triage and Case Investigation) Sophos's managed detection and response service uses in-house AI agents for alert triage and case investigation, with Sophos analysts supervising and owning response decisions. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Sophos MDR AI Agents (Triage and Case Investigation) |
 StrongestLayer TRACE agents (Inbox Advisor, Threat Triage and Threat Hunt) AI-native email security for Microsoft 365 and Google Workspace in which a multi-LLM reasoning engine (TRACE) investigates each email's intent against your business context and blocks attacks. Three classes of agents give employees plain-English verdicts in Outlook and Gmail, send pre-investigated, MITRE-mapped cases to the SOC, and hunt and remediate across mailboxes. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs StrongestLayer TRACE agents (Inbox Advisor, Threat Triage and Threat Hunt) |
 Sublime Security ASA and ADÉ (Autonomous Security Analyst and Autonomous Detection Engineer) Email security platform whose AI agents triage user-reported and flagged emails end to end (ASA, with passive or active auto-remediation modes) and write backtested detections for new attacks (ADÉ), which default to one-click human approval and can auto-activate when they clear a precision threshold. Runs as SaaS or self-hosted in AWS, including GovCloud. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Sublime Security ASA and ADÉ (Autonomous Security Analyst and Autonomous Detection Engineer) |
 Swimlane AI SOC (Intelligent Deep Agents on Turbine) Swimlane's AI SOC product, built on its Turbine automation platform, uses autonomous 'deep agents' to plan and run alert investigations, with explainable decisions, auditable actions and AI-generated plans that analysts can review and turn into playbooks. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Swimlane AI SOC (Intelligent Deep Agents on Turbine) |
 Synack Sara AI Pentesting Synack's Autonomous Red Agent (Sara) for agentic pentesting, with exploitable findings validated by the Synack Red Team. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Synack Sara AI Pentesting |
 Sysdig Agentic AI (Sysdig Secure AI agents) Outcome-driven AI agents inside Sysdig Secure for cloud and container security: Vuln, SOC, Posture, Risk and Response agents that investigate, prioritise and drive remediation on Falco-based runtime data. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Sysdig Agentic AI (Sysdig Secure AI agents) |
 Tenable One (Hexa AI) Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Tenable One (Hexa AI) |
 Torq AI SOC Platform (Socrates and HyperAgents) Agentic SOC platform where the Socrates orchestrator plans and delegates to specialised HyperAgents for alert triage, investigation and response automation. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Torq AI SOC Platform (Socrates and HyperAgents) |
 TrendAI Vision One Agentic SIEM and Companion Trend Micro's SOC stack (now under the TrendAI brand) pairing an Agentic SIEM and Agentic SOAR with purpose-built agents and the Trend Companion AI assistant. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs TrendAI Vision One Agentic SIEM and Companion |
 Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents) Specialised AI agents inside Upwind's runtime-first cloud security platform: Blue investigates threats to a verdict, Red proves which risks are exploitable, Green finds root-cause fixes and opens PRs, coordinated by Choppy. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Upwind AI Agentic Pack (Choppy, Blue, Red and Green agents) |
 WedgeX AI SOC Agent Australian AI SOC agent that enriches, investigates and recommends escalate/close actions on alerts, proposing containment for human approval. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs WedgeX AI SOC Agent |
 Wiz Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Wiz |
 Wolfia Questionnaire Agent (security questionnaires and trust center) Security-questionnaire agent that drafts every answer with a citation from the company's own corpus, routes ungrounded questions to the owning expert, returns the file in its original format, and fills portal-only questionnaires via a Chrome extension. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs Wolfia Questionnaire Agent (security questionnaires and trust center) |
 YesWeHack Agentic Pentest On-demand pentests of external attack surface run by AI agents shaped by YesWeHack's bug-hunting expertise, with dedicated verification agents, a Pentest Manager, same-day results and reports in its vulnerability-management platform. | Security | — | Ironscales AI agents (Phishing SOC Agent, Red Teaming Agent and Phishing Simulation Agent) vs YesWeHack Agentic Pentest |
 Aikido AI AutoFix Aikido AutoFix turns SAST, SCA, IaC, container, pentest and AI code-audit findings into reviewable pull requests or IDE patches. Vendor is Belgium-founded with a Ghent European HQ. | Code security | — | — |
 Amazon Q Developer security scanning Amazon Q Developer code reviews that scan for SAST issues, secrets, IaC misconfigurations, quality issues, deployment risks and SCA, with some in-IDE suggested fixes. | Code security | — | — |
 BigID Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases. | Risk | — | — |
 Black Duck Signal (agentic AI AppSec) Agentic AI application security tool (GA March 2026) with role- and task-based agents that analyse new code in any language, filter findings by exploitability and apply verified fixes, callable from Claude Code, Gemini and GitHub Copilot via MCP. | Code security | — | — |
 Black Kite AI Agent Third-party cyber risk agent made of sub-agents (Assessment, Incident Response, Threat Actor Intelligence, Investigation, Prioritization, Procurement) that assess vendors, investigate exposures, trigger rescans and draft outreach. | Risk | — | — |
 Checkmarx One Assist Family of agentic AppSec agents on Checkmarx One (Developer Assist in the IDE, plus triage/remediation). Checkmarx Ltd’s registered office is Ramat Gan, Israel. | Code security | — | — |
 Claude Code security review Anthropic automated security review in Claude Code: the /security-review command and the anthropics/claude-code-security-review GitHub Action for pull-request comments. | Code security | — | — |
 Codacy AI Reviewer Hybrid AI pull-request reviewer from Codacy (Lisbon). Combines static analysis with LLM context; vendor pages include security-vulnerability feedback and suggested fixes. | Code security | — | — |
 Cursor Bugbot Cursor’s AI pull-request reviewer. Official docs say it identifies bugs, security issues and code-quality problems and comments with explanations and suggested fixes. | Code security | — | — |
 Cycode AI Teammates (Exploitability, Remediation and Change Impact agents) Cycode's AppSec AI agents that assess the exploitability of findings, generate fixes, analyse change impact and query the risk graph inside the Cycode platform. | Code security | — | — |
 Endor Labs security agents (agentic triage and remediation) Pre-built AppSec agents that read Endor findings against your source, write SAST fixes or file exceptions, pick safe dependency upgrades and open PRs, and answer malware-exposure and CI/CD posture questions inside your coding agents. | Code security | — | — |
 Escape (AI pentesting and DAST) Offensive security platform using AI agents for attack surface discovery, business-logic DAST and multi-agent pentesting (Cascade) of APIs and web apps. | Code security | — | — |
 FlowForma Assure (AI agents for vendor risk assessment) Evidence-first vendor security assessment where AI agents read SOC 2 reports, ISO certificates, pen tests and questionnaires, validate controls, score risk with cited reasoning, auto-approve low-risk vendors and route high-risk ones to analysts with follow-up questions framed. | Risk | — | — |
 GitHub Copilot Autofix LLM-generated suggested fixes for GitHub code-scanning alerts (CodeQL). Part of GitHub Code Security / Advanced Security; no separate Copilot subscription is required. | Code security | — | — |
 GitLab Duo Vulnerability Resolution GitLab Duo features that explain SAST vulnerabilities and open merge requests with proposed AI remediations, including an agentic resolution flow. | Code security | — | — |
| Agentic AI triage and auto-fix for SAST findings in HCL AppScan: an LLM pass reviews each finding's accuracy and severity, filters false positives, and a deterministic codemod framework writes fixes in repos and pull requests. | Code security | — | — |
| Indian autonomous DevSecOps agent that scans each commit, generates a secure patch and opens a human-approved pull request. | Code security | — | — |
 Phoenix Purple (Phoenix Security) UK AI code-security agent platform with reachability-validated scanning, PR scanning, IDE/agent integrations and an agent that writes risk-tiered fix PRs. | Code security | — | — |
 Pixee (automated triage and fix) Security 'harness' that triages SAST/SCA/DAST/secrets findings for exploitability, opens fix pull requests with the analysis attached, works inside coding agents, and builds design-stage threat models. | Code security | — | — |
 Rippling Automated Compliance Compliance automation built into Rippling's HR and IT platform, with AI framework setup, evidence collection, in-platform AI remediation, an audit portal and Trust Centers. | Compliance | — | — |
 SAFE TPRM AI Co-Worker Agentic third-party risk management: a swarm of 100+ specialised agents runs the vendor lifecycle from intake and due diligence through remediation, continuous monitoring and offboarding. | Risk | — | — |
 Scytale AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles. | Compliance | — | — |
 Secureframe Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages. | Compliance | — | — |
 SecurityScorecard Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation. | Risk | — | — |
 Semgrep Multimodal Semgrep’s AI layer (successor branding to Semgrep Assistant) for detection, triage, remediation guidance and optional autofix on the Semgrep AppSec Platform. | Code security | — | — |
 SonarQube AI CodeFix Sonar LLM-generated fix suggestions for a documented subset of SonarQube issues, in Cloud Team/Enterprise and Server Enterprise/Data Center editions. | Code security | — | — |
 UpGuard Cyber risk and third-party risk management platform with published CRPM pricing page. | Risk | — | — |
 Vanta Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses. | Compliance | — | — |
 Veracode Fix Veracode’s AI-assisted remediation for SAST flaws and SCA dependency vulnerabilities, with suggested patches in IDE, CLI and SCM workflows. | Code security | — | — |
 VISO TRUST AI Agent (agentic third-party risk management) TPRM agent that launches due diligence as soon as a vendor is added, requests and renews SOC 2, ISO and pen-test artifacts, sends focused follow-ups, monitors breach advisories and drafts impact reports, escalating only exceptions to the team. | Risk | — | — |
 Xygeni DevAI and CoreAI (agentic AppSec) Agentic AppSec from Valladolid-based Xygeni: DevAI scans code in the IDE and generates validated fixes (including for AI-generated code), while CoreAI prioritises risk and orchestrates remediation PRs across the platform. | Code security | — | — |
 Zania Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability. | Compliance | — | — |
| AI-native AppSec platform that finds business-logic and auth flaws, validates findings from existing SAST tools, runs PR security reviews and generates one-click patches refined in natural language. | Code security | — | — |
Order is mechanical (shared dataset tags, then same primary category) — a relevance order, not a ranking or quality judgement. Framework tags indicate relevance, not certification.