AgentScan vs Crucible

AgentScan provides automated security testing for LLMs, RAG pipelines, and autonomous agents through a cloud API and web dashboard. It tests attack patterns including prompt injection, data exfiltration, jailbreaks, and MCP attacks. The product describes 412 vectors across 19 categories, though the Free, Starter, and Pro plans provide smaller subsets. Scan reports include a 0–100 risk score, severity breakdown, remediation advice, and evidence export in JSON or PDF. The dashboard detects agent formats, tracks progress and errors, and lets users adjust throttling. The REST API queues scans, returns a scan ID, and supports completion webhooks. AgentScan maps vulnerabilities to OWASP LLM Top 10 risks and describes links to EU AI Act articles and NIST AI RMF functions; its OWASP mapping excludes Model Denial of Service and Model Theft. Free includes 5 scans per month; paid plans start at $29 a month. The terms restrict scans to agents the customer owns or has explicit written authorization to test.

Crucible is a self-hosted security scanner for testing AI agents before production. It checks attack behavior such as prompt injection, goal hijacking, jailbreaks, unsafe output, and tool misuse. Instead of reviewing generated text alone, it evaluates tool calls, side effects, and outcomes. The site lists 11 modules and 153 attack vectors, covering eight of ten OWASP Agentic risks, with two in development. Crucible runs 90 attack payloads in under 60 seconds and produces an A–F report with severity, OWASP mapping, and reproduction steps. It supports LangChain, CrewAI, AutoGen, raw MCP endpoints, and agents with HTTP or MCP interfaces. The pip-installed CLI supports Python 3.10+. Local scanning needs no signup and has no telemetry by default. Community is free; Team and Enterprise add monitoring, dashboards, support, SSO, audit logs, deployment options, and custom modules.