Automated dependency updates
🌐 web
github.com
Alternatives to
SkillFortify
Best alternatives to SkillFortify in 2026
When you install a browser extension, you at least get a permissions prompt telling you what it can touch. Most "skills" or plugins you add to an AI agent — a Claude Code skill, an MCP server, a LangChain tool — come with no such warning: they can read your files, call APIs, or exfiltrate data, and there's no built-in way to know which ones are safe before you run them. SkillFortify is a security scanner built to close that gap: point it at your installed AI tools and it tells you, before you trust them, whether they're doing something dangerous. SkillFortify auto-discovers installed AI skills system-wide across 22 frameworks (Claude Code, MCP, LangChain, CrewAI, AutoGen, and others) and runs them through formal threat modeling (its own "DY-Skill" model, adapted from the Dolev-Yao protocol-verification tradition) plus static analysis, capability-based access control checks, and dependency-graph analysis. It produces interactive HTML dashboards, lockfiles for reproducible tool configurations, and AI Software Bill of Materials (ASBOM) documents for compliance. Its own benchmark, SkillFortifyBench (540 skills, 270 malicious / 270 benign), reports 100% precision but 92.59% recall — meaning it rarely flags a safe skill as dangerous, but can still miss some real threats, and its accuracy against genuinely novel (not benchmark) attacks is unvalidated.
Quick comparison of SkillFortify alternatives
| # | Tool | Best for | Price |
|---|---|---|---|
| 1 | Développeurs | — | |
| 2 | Développeurs | — | |
| 3 | Équipes DevOps/SRE et administrateurs système voulant un moniteur d'expiration de certificat sans dépendance pour cron/CI | — | |
| 4 | Équipes construisant des applications LLM soumises à des exigences de conformité (RGPD, AI Act) et de protection des données | — | |
| 5 | Développeurs et petites équipes voulant committer des secrets chiffrés dans Git sans gestionnaire cloud | — | |
| 6 | Consommateurs en ligne voulant vérifier l'authenticité d'une boutique avant d'acheter | — | |
| 7 | Chasseurs de bug bounty, chercheurs en sécurité, équipes de sécurité, pentesters, ingénieurs DevSecOps | — | |
| 8 | Fondateurs non-techniques, indie hackers, builders utilisant Lovable/Bolt/Cursor/Replit, petites équipes qui livrent vite, étudiants et débutants en code | — | |
| 9 | Développeurs et équipes DevOps/sécurité voulant un WAF auto-hébergé pour projets personnels ou non-commerciaux | — | |
| 10 | Chercheurs en sécurité, pentesters, chasseurs de bug bounty, professionnels cybersécurité | — | |
| 11 | Petits cabinets médicaux/dentaires et centres de santé communautaires américains recevant Medicare/Medicaid | — | |
| 12 | Développeurs utilisant des agents de code IA (Claude Code, Codex) sur des systèmes sensibles ou sous contrainte de conformité | — |
#1
#3
A free Python command-line tool that checks a website's HTTPS certificate and tells you exactly what's wrong with it — expired, untrusted, wrong hostname — instead of a generic connection error.
github.com
- ✓ Zero dependencies, easy to drop into bare servers or containers
- ✓ Detailed diagnostics rather than a generic 'connection failed'
#4
An open-source trust-boundary gateway that sits in front of OpenAI, Anthropic and Gemini API traffic to redact PII, enforce rate limits, and track usage without touching your app code.
github.com
- ✓ Single gateway covering OpenAI, Anthropic and Gemini without SDK changes
- ✓ Comprehensive PII detection and redaction
#5
A free command-line tool that encrypts your .env secrets file so you can safely commit it to Git, with a pre-commit hook that catches accidental leaks before they happen.
github.com
- ✓ Genuinely zero-config: one command sets up encryption plus a pre-commit safety net
- ✓ No external dependencies or cloud service required
#6
A free scanner and Chrome extension that checks an online store for signs it's an AI-generated or fraudulent storefront before you buy anything.
bullsniff.com
- ✓ Completely free, no account required for the base scan
- ✓ Checks multiple independent trust signals, not just page content
#7
A free, self-hostable security scanner that checks web apps, mobile apps, and smart contracts for vulnerabilities, with AI-written fix instructions.
bugbounty-arsenal.net
- ✓ Broad coverage (web, mobile, Web3 smart contracts) with no license fee
- ✓ "Confirmed" findings model reduces false positives
#8
A security scanner built for people who use AI to write their code and have no idea whether it's leaking API keys or open to attack.
vibesafe.info
- ✓ Scan complet en moins de 10 secondes, sans configuration
- ✓ Rapports en langage clair avec correctif en un clic
#9
A firewall that sits in front of your website and inspects every request for common attacks — SQL injection, cross-site scripting and the like — before it ever reaches your app.
github.com
- ✓ Très faible latence (Rust + Pingora, p99 1.60ms)
- ✓ Couvre les vecteurs d'attaque web classiques (OWASP Core Rule Set + règles custom)
#10
A free, organized archive of real, already-disclosed security vulnerabilities and how they were exploited — a reference library for people who need to understand attacks in order to defend against them.
github.com
- ✓ Collection organisée de vulnérabilités réelles avec writeups techniques
- ✓ Couvre des logiciels connus et largement utilisés
#11
A flat-fee compliance package that brings a healthcare provider's website and patient portal up to Section 1557 accessibility standards before the 2027 federal deadline.
health.civicbinder.org
- ✓ Flat, predictable price instead of open-ended hourly consulting
- ✓ Bundles audit + legal documents + remediation plan in one package
#12
Puts a human approval gate in front of risky Claude Code / Codex actions, with secret redaction and replayable audit trails.
github.com
- ✓ Adds a genuine approval checkpoint before risky agent actions execute
- ✓ Automatic secret/credential redaction reduces accidental leak risk
FAQ about SkillFortify alternatives
- What is the best alternative to SkillFortify in 2026?
- Based on our selection, Dependabot is the best alternative to SkillFortify in 2026. Automated dependency updates. See our full ranking above to compare all options.
- Is SkillFortify free?
- SkillFortify is a paid tool. Several alternatives in our selection offer free or freemium versions.
- How many alternatives to SkillFortify are there?
- mySelectas has listed 12 alternatives to SkillFortify in the Security & Privacy category. Our selection is updated regularly to include the best options available.