AI AGENT
SECURITY TESTING
THE DIRECTORY / ASSESSMENT SERVICES

Compare AI security
assessment providers.

A researched starting point for your shortlist. Each profile separates public provider statements from the questions you still need to ask.

Listed alphabetically. Unknown capability does not mean unavailable.

12 providersAll service models · All scopes
01 / Assessment service

Aspherity

Adversarial assessment of agents with access to data and connected actions.

  • AI agent testing
  • Prompt injection
  • RAG security
  • Tool misuse
02 / Hybrid service

Astra

Human-led AI application penetration testing paired with a testing platform.

  • LLM application testing
  • MCP assessment
  • Prompt injection
04 / Assessment service

Bishop Fox

AI security assessments spanning agents, retrieval pipelines and surrounding application infrastructure.

  • AI agent testing
  • LLM application testing
  • RAG security
  • Prompt injection
  • Tool misuse
05 / Hybrid service

Casco

AI application and agent workflow testing, with an optional security-engineer review.

  • AI agent testing
  • MCP assessment
  • RAG security
  • Prompt injection
  • Tool misuse
06 / Hybrid service

Cobalt

Human-led AI application pentesting with agent workflow and retrieval-layer coverage through the Cobalt platform.

  • AI agent testing
  • LLM application testing
  • RAG security
  • Prompt injection
  • Tool misuse
08 / Hybrid service

NetSPI

Expert-led AI and LLM testing with custom evaluations and continuous testing options.

  • LLM application testing
  • Prompt injection
  • Continuous testing
09 / Assessment service

Optiv

MCP security assessments of server deployments and their enterprise integrations.

  • MCP assessment
  • Tool misuse
10 / Assessment service

OSec

Senior-led AI red teaming covering tool-enabled agents, MCP servers, retrieval pipelines and agent-to-agent interactions.

  • AI agent testing
  • LLM application testing
  • MCP assessment
  • RAG security
  • Prompt injection
  • Tool misuse
11 / Assessment service

Themis

Agent assessments built around a capability map and an owner-confirmed authority baseline.

  • AI agent testing
  • MCP assessment
  • Tool misuse