CheckOps home

Tools directory

A

CheckOps

Akto

Akto is an MIT-licensed security platform that began in API security testing and now positions itself as security for AI agents, MCP servers and LLMs.

Visit website

Latest public signals

Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.

Visit Website

Introduction

Akto started as an open-source API security platform for API discovery and security testing. Its GitHub description now says it is an AI security platform for securing AI agents, MCPs, LLMs, agent skills and generative AI apps. The open-source repository remains MIT-licensed.

The source code is at akto-api-security/akto on GitHub under the MIT licence, with about 1,500 stars; the most recent commit was on 11 November 2026.

Features

  1. API discovery: Build an API inventory from traffic.
  2. Security tests: Templates for API vulnerabilities; see docs.
  3. AI agent and MCP security: Current focus per the project description.
  4. CI/CD: Run tests in pipelines.
  5. Self-hosted or cloud: Open-source and hosted options.

Pros

  1. Free to use: Open source under MIT.
  2. Maintained: Commits as recent as 11 November 2026.

Cons

  1. Changing focus: Product direction has shifted toward AI security.
  2. Commercial features: Some capabilities are in paid tiers; see site.

Follow the README to self-host with Docker, connect a traffic source, then run security test templates against discovered APIs.

Resources:

Pricing

The open-source edition is free (MIT). Paid plans exist; see site.

  1. Teams securing APIs and AI agents.
  2. Organisations needing an API inventory.
  3. Not a fit if you want a pure API fuzzer; consider RESTler or CATS.

Conclusion

Akto offers open-source API security testing and is expanding into AI agent security.

Alternatives

Other tools on CheckOps that cover similar ground. Open a page, or compare one with Akto side by side.