akto

Why we included this project

Akto suits teams that want AI security testing without standing up a whole new stack. It maps the APIs and agents exposed to an AI-heavy production setup, then runs attack scenarios covering prompt injection, jailbreaks, data leakage, and tool misuse, with findings tied to the OWASP top-ten lists for LLMs, agentic AI, and MCP. You can write your own tests and trigger scans from CI/CD, so AI checks ride the same pipeline as the rest of your app. Teams familiar with API discovery and testing will recognize the workflow, just aimed at AI workloads now. Self-hosting is also an option, which matters for organizations that need assessment data to stay on their own infrastructure.