AI security tools with a free plan
The INITE Atlas lists 317. By use, the list opens with Cloudflare, Lumo by Proton, Brave, Scamwise and Kentik AI.
The pricing page names a free plan, the product is free, or it is open source. Read off the vendor's own page, with the date.
Where each one says so
Ranked by use
Figure and bar: visits/mo, estimate · year: online since
- #1

CloudflareMCP · open
Proxies website traffic through a global network for CDN caching, DNS, DDoS protection and a web firewall, plus Workers serverless code and zero-trust access.
4.9MActiveFrom $20/mo2009 - #2

Lumo by Proton
Provides encrypted email, calendar, cloud storage, password manager and VPN under one Proton account, with the Lumo chat assistant as an add-on.
3.4MActiveFree plan2014 - #3

Brave
Browser that blocks ads and trackers, encrypts connections with built-in VPN, and includes private search.
1.4MActiveFrom $3/mo2015 - #8

Scamwise
Analyzes suspicious messages, emails, links, and images to detect scam signals and provide verdicts.
130kActiveFree - #9

Kentik AI
Collects network traffic data and detects anomalies like DDoS attacks and cost inefficiencies across cloud and on-premises infrastructure.
114kActiveFrom $2,000/mo - #13

Sonar
Analyzes source code statically in IDEs, CI pipelines and pull requests, reporting bugs, code smells, vulnerabilities and coverage against quality gates.
72.4kActiveFrom $34/mo2007 - #15

SonatypeMCP · sign-in
Hosts artifact repositories and scans open source dependencies, blocking malicious or vulnerable components before they enter builds.
69.4kActiveFrom $1,200/yr2008 - #18

Snyk
Scans source code, open source dependencies, container images and infrastructure-as-code for vulnerabilities, and suggests fixes in the IDE, CLI and pull requests.
63.1kActiveFrom $25/mo2015 - #20

Temp Mail
Generates disposable email addresses to receive verification codes and sign-ups without exposing your primary inbox.
45.3kActiveFrom $3.99/mo - #24

FusionAuthMCP · open
Hosts login, single sign-on, multi-factor and passwordless authentication, plus user management and role-based access, self-hosted or on FusionAuth's cloud.
42.2kActiveFrom $162/mo - #26

FootprintIQ
Scans 500 public platforms to reveal usernames, email breaches, data broker listings, and exposure risks.
35.5kActiveFrom ≈ $17/mo2025 - #28

BlockSurvey
Builds encrypted surveys and forms, including conversational ones, and analyzes responses for themes and sentiment, with HIPAA and GDPR options.
29.6kActiveFrom $49/mo2019 - #30

iSpyConnectMCP · sign-in
Records and analyses IP and USB camera feeds on your own machine, flagging motion and objects and sending alerts.
24.3kActiveFrom $7.95/mo2007 - #31

Stytch AI
Provides authentication, authorization and fraud detection APIs and SDKs for web apps, mobile apps and AI agents.
23kActiveFree plan - #32

TruthScanMCP · sign-in
Detects AI-generated and manipulated images and PDFs in real time via API to prevent fraud in claims, returns, and document verification.
20.3kActiveFrom $24/mo - #33

AZAPI.ai
Extracts text and fields from documents and ID cards, verifies identity documents and solves CAPTCHAs through REST APIs.
16.5kActiveFree plan - #34

BigID
Discovers and classifies sensitive data across enterprise systems, applies security controls, and manages AI governance risks.
14.6kFree plan2016 - #37

Deep SearchMCP · open
Searches public sources to find and verify people by name, phone, email, or photo with source links.
11.1kActiveFree plan - #38

Tines
Builds automation workflows from drag-and-drop actions, HTTP requests and LLM steps, mainly for security and IT operations such as alert triage.
10.8kActiveFree plan2018 - #42

IsThisSpam
Analyzes emails, texts, and websites to detect phishing, scams, and malicious content with instant verdicts.
6.8kActiveFrom ≈ $3.51/mo - #43

Facia
Verifies identities with face matching and liveness checks and detects deepfakes in images and video calls through an API and SDKs.
6.8kActiveFrom $0.10 per use2022 - #46

Modulate
Analyzes live voice conversations to flag toxicity, fraud, deepfake voices and compliance breaches, for game voice chat and contact centers.
6.2kActiveFrom $0.01 per use - #49

Strike Graph AI
Runs security compliance programs for SOC 2, ISO 27001 and other frameworks, collecting control evidence from connected systems for audits.
5.6kActiveFrom $10,000/yr2020 - #52

Fluid Attacks
Scans applications for vulnerabilities with automated tools and human penetration testing, ranks findings by exploitability and tracks their remediation.
4.3kActiveFree plan - #54

SynthGuard.net
Detects and identifies synthetic media including AI-generated images, video, and text using local processing.
4kActiveFrom ≈ $17/mo - #56

DiditMCP · sign-in
Verifies user identity through one API with document checks, face liveness, AML screening and transaction monitoring for KYC compliance.
3.4kActiveFrom $0.33 per use2023 - #58

Permit.io
Evaluates access control decisions for applications, APIs, and AI agents using role-based, attribute-based, and relationship-based policies.
3.4kActiveFree plan - #61

Lakera
Detects and prevents prompt injection attacks, data leakage, and jailbreaks in AI applications with real-time threat detection.
2.9kActiveFree plan1993 - #65

Superagent Cloud
Runs security checks on AI agents, scanning code, dependencies, and runtime behavior for vulnerabilities.
2.2kActiveFrom $499/mo - #73

StrixMCP · sign-in
Runs automated penetration tests across code, APIs, web apps, and infrastructure, validating findings and generating merge-ready fixes.
1.4kActiveFrom $29/user/mo - #74

TrunkMCP · sign-in
Detects and quarantines flaky tests in CI runs, and runs a merge queue that batches pull requests and bisects failures.
1.4kActiveFree plan2021 - #75

XposedOrNotMCP · open
Searches indexed data breach records for an email address or domain and reports which breaches, leaked fields and a risk score appear.
1.3kActiveFrom $9/mo2017 - #78

Safeguard
Finds and fixes software vulnerabilities and zero days autonomously across dependencies and containers.
1.2kActiveFrom $9/mo2025 - #80

Currai
Analyzes AI agent conversations to detect failures, policy violations, and user needs.
1.2kActiveFrom $4/mo - #83

Workers' RightsMCP · open
Encrypts a personal timeline and evidence log in the browser, checks employment-law protections, and drafts replies to employer filings.
961Active2025 - #87

S4E
Scans websites for vulnerabilities including SQL injection, XSS, misconfigurations, and exposed credentials.
834ActiveFrom $119/mo2022 - #89

Kratikal Tech Limited
Identifies and prioritizes security vulnerabilities in web apps, mobile apps, APIs, and cloud infrastructure.
780ActiveFree plan - #91

AI Security Guard
Detects malicious packages, scans prompts for injection attacks, and monitors agent runtime security.
675MaintainedFree2025 - #92

Nurbak
Scans GitHub repositories for vulnerabilities using a private AI model without sending code to third parties.
644ActiveFrom $79/mo - #94

ChainGPT AI Hub
Provides AI tools for blockchain analysis, smart contract generation and auditing, and crypto trading assistance.
622ActiveFrom $0.01 per use - #97

DomainScan AI
Monitors SSL certificates, DNS records, DMARC policies, and domain security threats with automated alerts and fixes.
587ActiveFrom $9/mo - #99

AI Auto-Labeling by T-Rex Label
Detects objects in images from visual prompts without retraining on new object classes.
573MaintainedFree - #101

DocVerify
Detects forged and manipulated documents through forensic analysis before AI agents process them.
542ActiveFrom $10/mo - #103

Vect
Verifies factual claims in documents by checking against trusted sources and reports accuracy.
517From $14.99/mo - #105

LayerCallMCP · open
API that scores signups, IPs, emails, phones, domains and devices for fraud risk in a single call.
436ActiveFrom $49/mo - #109

APort
Enforces authorization policies for AI agents before they execute shell commands, access files, call tools, or modify repositories.
395ActiveFrom $499/mo2024 - #111

OpenWakeWordMCP · open
Trains custom wake word detection models in 20 languages and exports them as ONNX for on-device use.
381Active - #115

GeoImageTagger
Detects where photos were taken, then writes GPS coordinates and generated keywords into each image's metadata fields.
352ActiveFrom $10/mo
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.