OpenHands Vulnerability Fixer (agent platform with security integrations) alternatives
OpenHands Vulnerability Fixer (agent platform with security integrations) is listed under Code security. These 61 agents share at least one category with it, ordered by number of shared framework tags, then category (a relevance order, not a ranking).
All category-sharing alternatives
| Agent | Category | Shared framework tags | Compare |
|---|---|---|---|
| Aikido AI AutoFix Aikido AutoFix turns SAST, SCA, IaC, container, pentest and AI code-audit findings into reviewable pull requests or IDE patches. Vendor is Belgium-founded with a Ghent European HQ. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Aikido AI AutoFix |
| Amazon Q Developer security scanning Amazon Q Developer code reviews that scan for SAST issues, secrets, IaC misconfigurations, quality issues, deployment risks and SCA, with some in-IDE suggested fixes. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Amazon Q Developer security scanning |
| Black Duck Signal (agentic AI AppSec) Agentic AI application security tool (GA March 2026) with role- and task-based agents that analyse new code in any language, filter findings by exploitability and apply verified fixes, callable from Claude Code, Gemini and GitHub Copilot via MCP. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Black Duck Signal (agentic AI AppSec) |
| Checkmarx One Assist Family of agentic AppSec agents on Checkmarx One (Developer Assist in the IDE, plus triage/remediation). Checkmarx Ltd’s registered office is Ramat Gan, Israel. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Checkmarx One Assist |
| Claude Code security review Anthropic automated security review in Claude Code: the /security-review command and the anthropics/claude-code-security-review GitHub Action for pull-request comments. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Claude Code security review |
| Codacy AI Reviewer Hybrid AI pull-request reviewer from Codacy (Lisbon). Combines static analysis with LLM context; vendor pages include security-vulnerability feedback and suggested fixes. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Codacy AI Reviewer |
| Cursor Bugbot Cursor’s AI pull-request reviewer. Official docs say it identifies bugs, security issues and code-quality problems and comments with explanations and suggested fixes. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Cursor Bugbot |
| Devin Cognition’s autonomous coding agent. Listed here only for documented Snyk MCP/CLI scanning and SonarQube/Snyk/Checkmarx IDE plugins — not as a dedicated security product. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Devin |
| Endor Labs security agents (agentic triage and remediation) Pre-built AppSec agents that read Endor findings against your source, write SAST fixes or file exceptions, pick safe dependency upgrades and open PRs, and answer malware-exposure and CI/CD posture questions inside your coding agents. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Endor Labs security agents (agentic triage and remediation) |
| Escape (AI pentesting and DAST) Offensive security platform using AI agents for attack surface discovery, business-logic DAST and multi-agent pentesting (Cascade) of APIs and web apps. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Escape (AI pentesting and DAST) |
| Factory Droids Factory’s Droid coding agents. Listed here only because Factory’s own pages document Snyk Studio integration for scan/fix/verify inside Droid workflows. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Factory Droids |
| GitHub Copilot Autofix LLM-generated suggested fixes for GitHub code-scanning alerts (CodeQL). Part of GitHub Code Security / Advanced Security; no separate Copilot subscription is required. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs GitHub Copilot Autofix |
| GitHub Copilot coding agent GitHub Copilot’s coding agent. Listed here only for the official workflow that assigns Dependabot security alerts to Copilot (or other agents) to open a draft fix PR. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs GitHub Copilot coding agent |
| GitLab Duo Vulnerability Resolution GitLab Duo features that explain SAST vulnerabilities and open merge requests with proposed AI remediations, including an agentic resolution flow. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs GitLab Duo Vulnerability Resolution |
| HCL AppScan RapidFix Agentic AI triage and auto-fix for SAST findings in HCL AppScan: an LLM pass reviews each finding's accuracy and severity, filters false positives, and a deterministic codemod framework writes fixes in repos and pull requests. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs HCL AppScan RapidFix |
| Pixee (automated triage and fix) Security 'harness' that triages SAST/SCA/DAST/secrets findings for exploitability, opens fix pull requests with the analysis attached, works inside coding agents, and builds design-stage threat models. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Pixee (automated triage and fix) |
| Qodo multi-agent code review Agentic pull-request review platform (formerly CodiumAI) that flags bugs, security issues and rule violations with organisational context. A general code reviewer, not a dedicated SAST scanner. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Qodo multi-agent code review |
| Semgrep Multimodal Semgrep’s AI layer (successor branding to Semgrep Assistant) for detection, triage, remediation guidance and optional autofix on the Semgrep AppSec Platform. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Semgrep Multimodal |
| SonarQube AI CodeFix Sonar LLM-generated fix suggestions for a documented subset of SonarQube issues, in Cloud Team/Enterprise and Server Enterprise/Data Center editions. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs SonarQube AI CodeFix |
| Tembo Agent orchestration platform (not a dedicated AppSec scanner) that opens auto-fix PRs from Snyk vulnerability scans and Sentry production errors. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Tembo |
| Veracode Fix Veracode’s AI-assisted remediation for SAST flaws and SCA dependency vulnerabilities, with suggested patches in IDE, CLI and SCM workflows. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Veracode Fix |
| Xygeni DevAI and CoreAI (agentic AppSec) Agentic AppSec from Valladolid-based Xygeni: DevAI scans code in the IDE and generates validated fixes (including for AI-generated code), while CoreAI prioritises risk and orchestrates remediation PRs across the platform. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs Xygeni DevAI and CoreAI (agentic AppSec) |
| ZeroPath (AI-native SAST and autofix) AI-native AppSec platform that finds business-logic and auth flaws, validates findings from existing SAST tools, runs PR security reviews and generates one-click patches refined in natural language. | Code security | — | OpenHands Vulnerability Fixer (agent platform with security integrations) vs ZeroPath (AI-native SAST and autofix) |
| Agentforce for Public Sector Pre-built Agentforce agents for federal, state and local government, covering complaint management, benefits and licensing, code-violation compliance and internal IT compliance; Salesforce says Agentforce is FedRAMP High authorized in Government Cloud Plus. | Business operations | — | — |
| Appian Agent Studio (AI agents) Generally available Agent Studio for deploying AI agents inside Appian processes that reason over enterprise data and act under platform guardrails; Appian Government Cloud is FedRAMP High authorized. | Business operations | — | — |
| AppZen AI agents (Autonomous AP, Expense Audit and AI Agent Studio) Agentic AI for accounts payable, expense audit and card spend: AI agents built from finance SOPs audit expenses and cards, process invoices and escalate uncertain decisions to humans, with explainable, auditable actions. | Business operations | — | — |
| AWS Continuum for penetration testing (formerly AWS Security Agent) AWS frontier agent (formerly AWS Security Agent) that runs on-demand penetration tests of your applications with tailored multi-step attack scenarios, reproducible proof and ready-to-implement fixes, billed per task-hour. | Security | — | — |
| Beam AI self-learning agents (finance and operations agent suites) Agentic automation platform that turns SOPs into self-learning production agents, with prebuilt finance agents for invoice reconciliation, accounts receivable and financial compliance and reporting. | Business operations | — | — |
| CoCounsel Legal (agentic legal AI) Agentic legal AI from Thomson Reuters that plans and executes multi-step legal work (research, document analysis, drafting and verification) grounded in Westlaw and Practical Law, including a Drafting Agent in Word that reviews agreements against playbooks. | Business operations | — | — |
| ComplyAdvantage AI-driven AML, fraud and financial crime risk detection platform for regulated financial institutions. | Risk | — | — |
| Conveyor Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content. | Security | — | — |
| Definely Enhance Agentic AI system inside Microsoft Word that plans contract drafting and review tasks and hands them to specialised agents, with lawyer oversight. | Business operations | — | — |
| Equixly Agentic AI Hacker (continuous API pentesting) Italian offensive-security platform whose agentic AI hacker continuously maps APIs and applications, chains API interactions to find exploitable flaws, and validates findings for remediation. | Security | — | — |
| Flank (autonomous legal agents) Supervised AI agents for enterprise in-house legal teams that run high-volume contracting work end-to-end (drafting, playbook review and redlining of counterparty paper, NDAs, infosec forms), with lawyers approving high-risk steps. | Business operations | — | — |
| Genie AI legal agents Legal AI agents that draft, review, redline and negotiate agreements against company rules, playbooks and negotiation guardrails, with published self-serve plans. | Business operations | — | — |
| Hadrian Nova (agentic pentesting) On-demand penetration testing run by a fleet of AI hacker agents, paired with Hadrian Atlas for continuous external exposure management. | Security | — | — |
| Harvey Agents Purpose-built legal AI agents that split large legal tasks, work in parallel and return cited, review-ready output for law firms and in-house teams. | Business operations | — | — |
| Hypatos agentic GBS workforce (finance back-office agents) Teams of AI agents for finance shared services that capture, code, tax-validate and PO-match invoices, process order confirmations, delivery notes and dunning letters, and post validated results to the ERP with traceable reasoning. | Business operations | — | — |
| Intruder AI Pentesting On-demand, code-aware web-app pentesting by AI agents built by Intruder's CREST-certified testers, with audit-ready reports in hours and issue-level 'micro pentests' to triage scanner findings. | Security | — | — |
| Juro AI Review Agentic contract review in Juro's contract platform that triages, reviews and redlines contracts (including counterparty paper in Word) against legal-team playbooks. | Business operations | — | — |
| Leah (formerly ContractPodAi) Agentic AI platform, formerly ContractPodAi, that runs contract lifecycle, legal, procurement and finance work end to end, including drafting, redlining, negotiation and obligations. | Business operations | — | — |
| Leena AI Colleagues Agentic AI platform with pre-built 'AI Colleagues' that auto-resolve employee IT, HR, finance and procurement back-office requests through 200+ enterprise connectors. | Business operations | — | — |
| LEGALFLY agents (Review, Legal Radar and Agent Studio) Legal AI platform with contracting, research and compliance agents, plus an Agent Studio that runs whole legal workflows from intake to approval against the organisation's playbooks. | Business operations | — | — |
| LegalOn Agents Specialised AI agents for in-house legal teams that build review playbooks, handle intake requests, translate contracts and triage low-risk agreements, under attorney control. | Business operations | — | — |
| Legora Agent Agent at the core of Legora's legal AI platform that plans, executes, reviews and delivers multi-step legal work with autonomous tool use and firm-specific skills. | Business operations | — | — |
| Luminance Agent Lumi and Autonomous Negotiation Legal AI platform whose agent (Agent Lumi) marks up contracts against company playbooks and triggers approvals; its Autonomous Negotiation can run AI-to-AI contract negotiations. | Business operations | — | — |
| Mindflow AI Agents (agentic SecOps/ITOps automation) No-code agentic automation platform for SecOps, ITOps and CloudOps: mission-oriented AI agents that reason and act across 4,000+ integrations, with RBAC, approval steps and full audit logs. | Security | — | — |
| Moveworks Enterprise AI assistant platform that automates employee support and business operations workflows across IT, HR and related systems. | Business operations | — | — |
| Payhawk AI agents (Financial Controller, Procurement, Payments and more) Spend-management AI agents that enforce spend policy, collect and match receipts, chase approvals, code transactions for month-end close and handle procurement, travel and payment requests. | Business operations | — | — |
| Pega AI agents (Pega Cloud for Government) Enterprise workflow platform whose AI agents (Coach, Knowledge Buddy, Automate, developer agents and the Blueprint design agent) run on Pega's trusted workflows; Pega Cloud for Government, including these gen AI agents, is FedRAMP High authorized. | Business operations | — | — |
| RunSybil Sybil (AI offensive security / autonomous pentesting) AI offensive security platform whose agents run black- or white-box autonomous pentests, chain vulnerabilities across code, APIs, cloud and infrastructure, reproduce every finding, and re-test on each deployment. | Security | — | — |
| SafeBase Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata). | Security | — | — |
| ServiceNow Now Assist Generative AI assistance across the ServiceNow platform, including IT, customer and GRC/IRM workflows depending on licensed modules. | Business operations | — | — |
| Snyk Developer-first application security platform; Snyk Agent Fix (formerly DeepCode AI Fix) generates and validates AI-suggested remediations for Snyk Code findings. | Security | — | — |
| Spellbook Associate AI agent for transactional lawyers that plans and executes multi-document drafting, review and redlining projects inside the Spellbook suite. | Business operations | — | — |
| SpotDraft Sidebar AI agents and VerifAI AI agents in SpotDraft's contract platform for contract review, contract queries, clause drafting and regulatory tracking, plus VerifAI playbook review inside Microsoft Word. | Business operations | — | — |
| Stacks accounting agents Agentic financial close workspace where AI agents handle reconciliations, journal entries, anomaly detection and reporting while accounting teams review the work. | Business operations | — | — |
| UiPath Autopilot / agents Enterprise automation platform with Autopilot and agentic automation for business operations and process orchestration. | Business operations | — | — |
| Unique AI financial agents (KYC, due diligence and research agents) Agentic AI platform for banks, asset and wealth managers with prebuilt financial agents for KYC, due diligence, RFP analysis and research, plus custom agents with governed tool and data access and audit logs. | Business operations | — | — |
| Wordsmith AI legal agents AI agents for in-house legal teams that take inbound requests in Slack, Teams or email, apply the team's playbooks and return ready-to-send work, escalating non-standard matters with reasoning. | Business operations | — | — |
| Workiva Agent Studio (finance, audit and GRC agents) No-code agent builder and prebuilt agents on Workiva's reporting, audit and GRC platform, used for finance tie-outs and roll-forwards and for evidence collection, control testing and remediation, with configurable review and approval steps. | Compliance | — | — |
Order is mechanical (shared dataset tags, then same primary category) — a relevance order, not a ranking or quality judgement. Framework tags indicate relevance, not certification.