The real catalog of tools for AI agents

Scan text and git diffs for committed credentials using real vendor key formats plus entropy.

Detects leaked secrets & API keys: 32+ provider rules (AWS, GitHub, Stripe, OpenAI…), zero deps.

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

26 rules and 32 safe-replacement snippets for hardcoded connection strings, keys and kubeconfigs acr

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

Audit Make.com blueprints before importing: hardcoded secrets, dangling refs, risky settings.

Security gateway for AI agents: policy, approval, and audited execution, no secrets shared.

Guardian layer for AI agents: identity, secrets, audit via MCP.

Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.

Secrets vault for Claude Code with audit logs, access rules, and AES-256 encryption.

Local-first secret scanning, rotation, vault, and audit-log tools for AI agents.

Security for AI agents: MCP audits, secret redaction, skill vetting, network scans, agent checkout.

Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.

Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

Security gate for agent-driven WhatsApp: allowlist, secret scan, rate limit, audit log.

TOTP secret charset, secret discarded

Encrypted secret store and rotation for autonomous agent credentials