AI security tools that state HIPAA compliance
The INITE Atlas lists 63. By use, the list opens with NinjaOne Copilot, Vanta, Hyperproof, Secureframe and FusionAuth.
The vendor states HIPAA compliance on its own trust, security or privacy page; some offer a BAA. Their statement, read with the date; we did not audit it.
Where each one says so
Ranked by use
Figure and bar: visits/mo, estimate · year: online since
- #6

NinjaOne Copilot
Manages endpoints, patches vulnerabilities, backs up devices, and provides remote support from a unified console.
275kActiveFrom $1.50/mo2014 - #14

Vanta
Automates compliance evidence collection and audit preparation across SOC 2, HIPAA, ISO 27001, and other frameworks.
71.1kActiveContact sales - #19

Hyperproof
Automates governance, risk, and compliance workflows across multiple frameworks with control mapping and evidence collection.
61.7kActive - #21

Secureframe
Automates compliance tasks and evidence collection to help organizations meet security standards like SOC 2, ISO 27001, and HIPAA.
43.5kActiveFrom $7,500/yr2020 - #24

FusionAuthMCP · open
Hosts login, single sign-on, multi-factor and passwordless authentication, plus user management and role-based access, self-hosted or on FusionAuth's cloud.
42.2kActiveFrom $162/mo - #28

BlockSurvey
Builds encrypted surveys and forms, including conversational ones, and analyzes responses for themes and sentiment, with HIPAA and GDPR options.
29.6kActiveFrom $49/mo2019 - #36

Guardrails AI
Detects policy violations, hallucinations, and data leakage in large language model outputs at runtime.
11.5k - #39

Protecto
Detects and masks sensitive data in real time across AI pipelines, enforcing access control and maintaining audit logs.
9.6kActive - #41

Scytale
Automates compliance programs for SOC 2, ISO 27001, HIPAA and GDPR by collecting evidence, monitoring controls and tracking audit readiness.
7.5kActiveContact sales2021 - #45

Strac
Finds, classifies and redacts sensitive data such as PII and PHI across SaaS apps, email, endpoints and generative AI tools.
6.3kActiveContact sales - #47

Torq Copilot
Security automation platform that triages alerts, runs investigations and executes response workflows across a SOC's security tools.
5.9kActive2019 - #48

TrustCloud
Monitors security controls continuously across first and third-party systems to quantify cyber risk and compliance posture.
5.6kActiveContact sales - #49

Strike Graph AI
Runs security compliance programs for SOC 2, ISO 27001 and other frameworks, collecting control evidence from connected systems for audits.
5.6kActiveFrom $10,000/yr2020 - #56

DiditMCP · sign-in
Verifies user identity through one API with document checks, face liveness, AML screening and transaction monitoring for KYC compliance.
3.4kActiveFrom $0.33 per use2023 - #58

Permit.io
Evaluates access control decisions for applications, APIs, and AI agents using role-based, attribute-based, and relationship-based policies.
3.4kActiveFree plan - #61

Lakera
Detects and prevents prompt injection attacks, data leakage, and jailbreaks in AI applications with real-time threat detection.
2.9kActiveFree plan1993 - #72

Skyflow
Encrypts and controls access to sensitive data across enterprise systems and AI applications at runtime.
1.4kActiveContact sales2019 - #78

Safeguard
Finds and fixes software vulnerabilities and zero days autonomously across dependencies and containers.
1.2kActiveFrom $9/mo2025 - #97

DomainScan AI
Monitors SSL certificates, DNS records, DMARC policies, and domain security threats with automated alerts and fixes.
587ActiveFrom $9/mo - #106

Probo
Manages compliance programs and automates evidence collection for security certifications like SOC 2 and ISO 27001.
433ActiveContact sales2024 - #110

Espresso Labs
Manages cybersecurity, IT operations, and compliance frameworks like CMMC and SOC 2 with 24/7 monitoring and automated remediation.
386ActiveFrom $1,000/mo - #124

SecurityWall
Orchestrates penetration testing, vulnerability scanning, and remediation workflows with automated coordination and threat intelligence.
239Active2016 - #126

Flowtriq
Detects and automatically mitigates DDoS attacks in under one second using traffic analysis and BGP rules.
202ActiveFrom $7.99/user/mo2025 - #129

LogicGate Risk Cloud AI
Centralized platform for governance, risk, and compliance that automates control testing, evidence collection, and compliance workflows.
176ActiveContact sales2015 - #141

ISMS DirectoryMCP · open
Lists verified ISO 27001 and SOC 2 compliance consultants and auditors, searchable by a query interface or through an API.
138Active - #158

PrivacyScrubber
Redacts personally identifiable information from AI prompts and documents in local memory before sending to language models.
73ActiveFrom $15/mo - #163

CamoText
Masks sensitive text and metadata in documents locally before sending to AI services.
68ActiveFrom $59 once - #165

StealthNet AI
Conducts penetration tests using autonomous AI agents validated by senior testers, delivering audit-ready reports in 48 hours.
64ActiveFrom $3,500 once - #181

deepidv
Verifies identities and detects deepfakes through document, liveness, and biometric checks via API.
42ActiveFrom $0.01 per use - #182

IntelliHuman.AI
Encodes expert judgment into auditable decision workflows for insurance claims, prior authorization, and logistics triage.
41ActiveContact sales2024 - #191

SecNav
Verifies security professionals through high-fidelity mission simulations and forensic telemetry tracking.
37ActiveFrom $10 per use2025 - #196

Cypago AI
Automates compliance monitoring, control testing, and audit preparation using AI agents across security frameworks.
33MaintainedContact sales2020 - #205

TurboPentest
Runs automated penetration tests with AI agents and security tools, delivering auditor-ready reports with exploits and fixes.
24ActiveFrom $99/mo2024 - #229

AlfaNest LabsMCP · sign-in
Scans OpenAPI specifications for security risks and provides agent guardrails for AI systems.
14ActiveFrom ≈ $5.61 once2024 - #232

Velocibid
Automatically fills security questionnaires by extracting answers from your uploaded compliance documents.
13ActiveFrom $49/mo - #236

PromptGuard
Inspects requests to LLM applications and blocks prompt injection, jailbreak attempts, and personally identifiable information leaks.
12ActiveFrom $99/mo - #237

PrivacyPal Desktop Application Launch
Intercepts sensitive data before it reaches AI applications and substitutes synthetic replacements on-device.
12ActiveFrom $7.50/mo - #241

Nonym
Intercepts and redacts personally identifiable data before it reaches third-party vendors and AI APIs.
11ActiveFrom $49/mo - #253

GetCybr
Runs vCISO, compliance and gap-assessment workflows across an MSP's client base, with agents drafting assessments, roadmaps and reports.
9ActiveFrom $49/mo2023 - #264

Scan Ninja AI
Manages vulnerability remediation and prepares security compliance evidence for SOC 2 and CMMC audits.
8ActiveFree plan - #277

CustosaMCP · sign-in
Inspects and redacts sensitive data fields before passing records to AI systems, sealing verdicts as cryptographic proof.
6Active - #288

CyphrexMCP · open
Enforces agent behavior policies, blocks unsafe actions, and produces cryptographically signed audit trails for regulatory compliance.
5ActiveFrom $42,000/yr - #289

AttestvioMCP · open
Free calculator sheets that size compliance evidence, audit and incident workloads, plus a paid record keeper for obligations and attestations.
5ActiveFrom $29/mo2026 - #290

AIDR
Intercepts and blocks sensitive data leakage from employee clipboard pastes and API calls to AI tools across endpoints and gateways.
5Active - #295

Sidian DataGuard
Scans files before sharing to redact sensitive data according to compliance rules and firm policies.
4ActiveFrom $4,000/mo - #323

Reflex AI Antivirus
Detects malware and threats on desktop and mobile using local AI models with zero cloud telemetry.
2Maintained2022 - #370

Pencheff
Scans applications and infrastructure for security vulnerabilities, generates remediation guidance and compliance evidence.
1Active2025 - #376

KanActive AI
Redacts sensitive data in browser before it reaches AI tools like ChatGPT and Claude.
1
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.