AI security tools with an API
The INITE Atlas lists 226. By use, the list opens with Cloudflare, Sonar, Vanta, FusionAuth and Socure.
The homepage shows an API or an SDK: it can be called from code.
Where each one says so
Ranked by use
Figure and bar: visits/mo, estimate · year: online since
- #1

CloudflareMCP · open
Proxies website traffic through a global network for CDN caching, DNS, DDoS protection and a web firewall, plus Workers serverless code and zero-trust access.
4.9MActiveFrom $20/mo2009 - #13

Sonar
Analyzes source code statically in IDEs, CI pipelines and pull requests, reporting bugs, code smells, vulnerabilities and coverage against quality gates.
72.4kActiveFrom $34/mo2007 - #14

Vanta
Automates compliance evidence collection and audit preparation across SOC 2, HIPAA, ISO 27001, and other frameworks.
71.1kActiveContact sales - #24

FusionAuthMCP · open
Hosts login, single sign-on, multi-factor and passwordless authentication, plus user management and role-based access, self-hosted or on FusionAuth's cloud.
42.2kActiveFrom $162/mo - #29

Socure
Verifies identities and detects fraud using machine learning for onboarding and authentication.
28.2kActiveFrom $0.80 per use - #31

Stytch AI
Provides authentication, authorization and fraud detection APIs and SDKs for web apps, mobile apps and AI agents.
23kActiveFree plan - #32

TruthScanMCP · sign-in
Detects AI-generated and manipulated images and PDFs in real time via API to prevent fraud in claims, returns, and document verification.
20.3kActiveFrom $24/mo - #33

AZAPI.ai
Extracts text and fields from documents and ID cards, verifies identity documents and solves CAPTCHAs through REST APIs.
16.5kActiveFree plan - #36

Guardrails AI
Detects policy violations, hallucinations, and data leakage in large language model outputs at runtime.
11.5k - #42

IsThisSpam
Analyzes emails, texts, and websites to detect phishing, scams, and malicious content with instant verdicts.
6.8kActiveFrom ≈ $3.51/mo - #43

Facia
Verifies identities with face matching and liveness checks and detects deepfakes in images and video calls through an API and SDKs.
6.8kActiveFrom $0.10 per use2022 - #44

Barndoor AI
Routes AI model and agent requests through access controls, data-loss prevention and audit logging before they reach the model.
6.5kActiveContact sales - #46

Modulate
Analyzes live voice conversations to flag toxicity, fraud, deepfake voices and compliance breaches, for game voice chat and contact centers.
6.2kActiveFrom $0.01 per use - #51

Oso Cloud Policy AI
Evaluates application authorization rules written in the Polar policy language through an API, deciding which users or agents can access what.
4.4kActiveFrom $15/user/mo - #53

HiddenLayer
Detects and prevents attacks on AI systems across discovery, supply chain, simulation, and runtime environments.
4.1kActiveContact sales - #56

DiditMCP · sign-in
Verifies user identity through one API with document checks, face liveness, AML screening and transaction monitoring for KYC compliance.
3.4kActiveFrom $0.33 per use2023 - #58

Permit.io
Evaluates access control decisions for applications, APIs, and AI agents using role-based, attribute-based, and relationship-based policies.
3.4kActiveFree plan - #59

FleetDM AI
Manages and patches laptops, phones and servers across macOS, Windows, Linux, iOS and Android from one open-source console built on osquery.
3.3kActiveFrom $7/mo - #61

Lakera
Detects and prevents prompt injection attacks, data leakage, and jailbreaks in AI applications with real-time threat detection.
2.9kActiveFree plan1993 - #62

Silobreaker
Aggregates security intelligence signals from multiple sources and applies analysis across cyber, geopolitical, and physical risks.
2.9kActive - #63

Transmit Security
Detects autonomous agents accessing applications and enforces runtime access policies based on agent classification.
2.3kActiveFrom $50,000/yr2014 - #65

Superagent Cloud
Runs security checks on AI agents, scanning code, dependencies, and runtime behavior for vulnerabilities.
2.2kActiveFrom $499/mo - #66

IndiciaMCP · sign-in
Runs OSINT searches across breach dumps, person records, social platforms and network infrastructure from one query, with an agent driving a browser.
2.1kActiveFrom $1 per use - #72

Skyflow
Encrypts and controls access to sensitive data across enterprise systems and AI applications at runtime.
1.4kActiveContact sales2019 - #73

StrixMCP · sign-in
Runs automated penetration tests across code, APIs, web apps, and infrastructure, validating findings and generating merge-ready fixes.
1.4kActiveFrom $29/user/mo - #75

XposedOrNotMCP · open
Searches indexed data breach records for an email address or domain and reports which breaches, leaked fields and a risk score appear.
1.3kActiveFrom $9/mo2017 - #85

Ridge Security
Continuously finds and validates exploitable vulnerabilities through automated penetration testing and agentic red teaming.
925Active - #90

ArcjetMCP · sign-in
Checks each action an AI agent takes against prompt injection, PII, bot and policy rules before the call runs, and logs the decision.
738ActiveFrom $25/mo - #91

AI Security Guard
Detects malicious packages, scans prompts for injection attacks, and monitors agent runtime security.
675MaintainedFree2025 - #92

Nurbak
Scans GitHub repositories for vulnerabilities using a private AI model without sending code to third parties.
644ActiveFrom $79/mo - #94

ChainGPT AI Hub
Provides AI tools for blockchain analysis, smart contract generation and auditing, and crypto trading assistance.
622ActiveFrom $0.01 per use - #97

DomainScan AI
Monitors SSL certificates, DNS records, DMARC policies, and domain security threats with automated alerts and fixes.
587ActiveFrom $9/mo - #100

Bynn Document Fraud Detection SoftwareMCP · sign-in
Analyzes uploaded PDFs and images for forgery, post-signature edits and AI-generated content, returning an authenticity report via dashboard or webhook.
552ActiveFrom $99/mo2003 - #101

DocVerify
Detects forged and manipulated documents through forensic analysis before AI agents process them.
542ActiveFrom $10/mo - #105

LayerCallMCP · open
API that scores signups, IPs, emails, phones, domains and devices for fraud risk in a single call.
436ActiveFrom $49/mo - #109

APort
Enforces authorization policies for AI agents before they execute shell commands, access files, call tools, or modify repositories.
395ActiveFrom $499/mo2024 - #116

Dutifi
Answers tariff classification, duty rate, and trade compliance questions against live EU and international regulations.
339ActiveFrom ≈ $111/mo - #117

NOAN
Stores and serves verified business facts to AI agents, apps, and sites through a single API.
335ActiveFrom $99/mo - #118

Cleared
Runs identity, background, and employment verification checks for hiring, tenant screening, and KYC onboarding in Jamaica and the Caribbean.
330Active - #119

Wardstone
Detects prompt injection attacks, jailbreaks, harmful content, and PII leakage in LLM inputs and outputs.
298ActiveFrom $199/mo - #120

Checkstep
Scans text, image, video and audio content to enforce policies and detect abuse at scale.
291Active - #123

ListarMCP · sign-in
Finds verified work emails and direct phone numbers for contacts from LinkedIn profiles, CSV files or company names, querying 30 data sources.
242ActiveFrom ≈ $0.11 per use - #126

Flowtriq
Detects and automatically mitigates DDoS attacks in under one second using traffic analysis and BGP rules.
202ActiveFrom $7.99/user/mo2025 - #128

SmartDocs
Generates safety data sheets and manages REACH chemical compliance documentation through an API.
191MaintainedFrom ≈ $0.07 per use - #130

Walrus
Stores and verifies data for AI agents and applications with portable, persistent, and independently verifiable storage.
173Active2025 - #133

ConsentStackMCP · sign-in
Consent banner and script blocker that detects visitor jurisdiction, applies matching GDPR or CCPA consent models, and reports consent rates.
158ActiveFrom $29/mo2025 - #134

Email List ValidationMCP · open
Verifies email lists for deliverability, flagging invalid, risky and role-based addresses, spam traps and complainers, then exports cleaned segments.
156ActiveFrom $14/mo - #136

URL Scanner Online (Aprensec)
Scans URLs for malware, SSL issues, DNS records, phishing, and security misconfigurations with downloadable reports.
149From ≈ $5.62 once
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.