Inkog

Inkog is an open source static analysis tool purpose-built for AI agent code, identifying vulnerabilities unique to LLM-powered and agentic applications, such as token bombing, prompt injection, missing oversight, and compliance gaps. It maps its findings directly to major compliance frameworks (EU AI Act, NIST, ISO 42001, OWASP LLM Top 10) and supports popular agent frameworks and no-code tools. Inkog is designed for developers, security engineers, and organizations deploying AI agents who want to proactively discover and mitigate agent-specific risks before shipping their code.