Category
AI API security software: what they are and who makes them
api testing and attack simulation, offensive security platforms, runtime discovery and protection, agent and mcp security: APIsec, StackHawk, Levo through Data Theorem.
Types of AI API security software
API testing and attack simulation
APIsec, StackHawk, Pynt and Equixly send crafted requests at your APIs to find authorization and logic flaws. Some run in CI, some run on a schedule. They suit teams that own the code and can fix what the test finds.
Offensive security platforms
Escape and Equixly sell AI pentesting, where agents plan multi-step attacks instead of replaying signatures. Both publish no price. They suit security teams that would otherwise buy a manual penetration test a few times a year. Expect a demo before any trial.
Runtime discovery and protection
Levo, Salt Security and Cequence watch live traffic to inventory APIs, flag abuse and in some cases block it. They are enterprise products that connect to gateways and cloud accounts, and all of them sell through sales. Expect a proof of concept.
Agent and MCP security
Akto and the newer modules from Salt, Cequence, Levo and Pynt cover AI agents, MCP servers and LLM endpoints. This area changes quickly, so ask each vendor which controls are shipping and which are announced. Read changelogs closely. Compare dates.
Facts at a glance
| Tool | Publisher | Based in | Access |
|---|---|---|---|
| APIsec | APIsec Inc. | United States | Free tier |
| StackHawk | StackHawk, Inc. | United States | Trial + API |
| Levo | Levo, Inc. | United States | Paid |
| Equixly | Equixly | Italy | Paid |
| Pynt | Pynt, Inc. | United States | Trial |
| Escape | Escape Technologies | France | Paid + API |
| Salt Security | Salt Security, Inc. | United States | Paid |
| Cequence | Cequence Security | United States | Paid |
| Akto | Akto | United States | Paid |
| Data Theorem | Data Theorem, Inc. | Not stated on the vendor pages | Paid |
