AI Security Matrix

A curated list of AI-enabled security testing tools.

Definitions

Category

agent 21 Runs its own task loop, deciding the next step from what it just found.
mcp 13 Serves tools to a model over Model Context Protocol. The model drives.
scanner 20 Runs a fixed set of checks and reports what they found.
skill 9 Prompts and instructions for a model. No program of its own.

Scope

ad 9 Active Directory: on-premises domain identity.
agentic 9 AI agents and the loops they run, as the thing under test.
api 4 HTTP and RPC interfaces behind an application.
binary 7 Compiled executables and firmware.
cloud 2 Provider accounts and their configuration.
code 7 Source, in a repository or a diff.
container 0 Images, registries, and what runs inside them.
entra 2 Entra ID: Microsoft's cloud identity.
llm 11 The model itself: its prompts, its guardrails, and what it emits.
mobile 0 iOS and Android applications.
modfile 5 Serialised model files, whose formats can carry executable code.
network 21 Hosts, ports, and traffic.
recon 15 Finding what exists, before anything is tested.
redteam 9 Adversary emulation across a whole estate.
social 1 People: phishing, pretexting, and what they hand over.
webapp 25 Browser-facing applications.