HackWednesday.
Search
Explore

AI Security Tools

Free tools for teams adopting AI agents and LLM workflows.

Use these tools to assess AI security readiness, plan CISO priorities, investigate agent risk, and turn HackWednesday research into operational next steps.

Check an MCP configRun the readiness scoreRead threat briefs
A HackWednesday AI security illustration showing quiet model activity and visible controls.
The tools hub turns AI security research into practical controls, checklists, and assessment paths.

Tool directory

Start with the assessment, then use the hubs for deeper context.

LocalFree

Agent Permission Diff

Compare previous and proposed MCP configurations or skill files locally. Review changed access declarations and download a redacted report.

MonitorFree

AI Incident Tracker

Explore sourced OpenAI, Anthropic, and Google security disclosures alongside cached official service-status feeds. Filter the visual timeline and review defensive takeaways.

LocalFree

MCP Config Checker

Paste an MCP configuration and review visible risks locally: broad filesystem access, shell wrappers, hardcoded secrets, remote startup URLs, and excessive permissions.

LocalFree

Agent Skill Reviewer

Inspect SKILL.md and agent instructions locally for risky commands, secret access, and permission bypasses. Get line references, suggested actions, and downloadable reports.

ModelFree

AI Agent Permission Explorer

Model what an agent can read, write, administer, or chain together across repos, CI/CD, terminal, secrets, cloud, production, email, browser sessions, and SaaS tools.

GameFree

Wednesday Security Challenge

Play a five-minute fictional incident and get a shareable score for AI agent, MCP, secret, retry-loop, and production-change decisions.

InteractiveFree

AI Security Readiness Score

A six-question assessment for AI agent identity, tool permissions, egress, monitoring, and incident response maturity.

PlaybookFree

CISO AI Security Hub

Leadership-focused guidance for AI agent governance, LLM adoption, and operational security controls.

ResearchFree

CISO Lookup

Search company or ticker context for security leadership research and relationship mapping.

LearningFree

Security Timeline

Interactive cybersecurity history with impact bubbles, prevention notes, and flash cards.

Free AI Security Tool

AI Security Readiness Score

Answer six control questions to estimate whether your organization is ready for AI agents, model gateways, coding assistants, and machine-speed cyber activity.

50
Managed

You have useful controls, but gaps remain where agent autonomy, tool access, or logging can outpace governance.

InventoryDo you know which AI assistants, agents, model gateways, and coding tools are active in your environment?
IdentityDo AI agents and automation have distinct identities instead of shared human or admin credentials?
Data BoundariesCan you prevent sensitive data, source code, prompts, and tool outputs from leaving approved boundaries?
Tool PermissionsAre agent tools, MCP servers, browser actions, shell access, and code execution gated by risk?
MonitoringCan security reconstruct what an AI agent read, called, changed, generated, or attempted?
Incident ResponseDo incident playbooks cover AI-agent misuse, prompt injection, model gateway compromise, and runaway automation?

Recommended next actions

  1. Create an AI asset inventory that includes owner, business use, model/provider, data access, tools, and environment.
  2. Assign every agent, bot, scanner, and workflow its own identity with scoped permissions and expiration.
  3. Add model-gateway policy, data classification, prompt redaction, and egress rules for sensitive workflows.
  4. Separate read-only analysis from write actions, production changes, credential operations, and external calls.
Open CISO playbookRead the latest risk brief

CISO Lookup

Type an S&P 500 company and reveal the current security leader we have verified.

The picker is prefilled with the current S&P 500 constituent list. The executive directory is curated, source-linked, and intentionally conservative. It also supports a small set of verified non-index companies such as DocuSign. If HackWednesday has not verified a company’s current CISO or security chief, the tool will say so instead of guessing.

Roles and work histories can change. This public-source directory does not imply endorsement or affiliation. To request a correction or removal, email info@ideaascode.com with the page URL and supporting details.