EvalView regression tests AI agents by snapshotting behavior and comparing tool calls in CI.
Open source
17 alternativesh5i
h5i provides a red-teaming workspace with browser access, HTTP traffic controls, sandboxed execution, and auditable sessions.
About h5i
h5i is an open-source, agent-native web security workspace published as a GitHub repository. It supports two approaches: red-teaming, where AI agents use a unified CLI for browser automation, HTTP traffic capture and replay, and reconnaissance to find vulnerabilities in existing web applications; and formal verification, where application logic written with the Axum-based Rust framework h5i-app is translated into Lean 4 (via Aeneas) so properties such as authorization, data isolation and business logic can be proved. Red-teaming does not require migrating an application to h5i-app.
Key features
- Browser automation for navigation, form interaction, and authenticated workflow testing
- HTTP capture, modification, replay, and comparison for investigating vulnerabilities
- Recon crawling and JavaScript analysis to find endpoints, parameters, hidden surfaces
- Save confirmed attack flows and replay them in CI/CD for regression checks
- Sandboxed agent execution with configurable filesystem and network restrictions
- Formal verification of Rust logic in Lean 4 via h5i-app, an Axum framework
Best for: Security engineers and developers who want AI agents to test existing web applications for vulnerabilities, and Rust teams willing to build on h5i-app to prove properties formally.
Good for
- Open source repository with source code, documentation, and CI regression examples available
- Red-teaming works with any web services regardless of framework, with no migration required
- Combines agent-driven vulnerability testing with proof-based verification of Rust application logic
Watch out for
- The formal verification path applies only to applications built with h5i-app, an Axum-based Rust framework
- The websec, recon, and test capabilities are optional plugins that must be selected at install time
- No pricing or licensing details beyond the repository listing are provided
h5i at a glance
- Website
- github.com/h5i-dev/h5i
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
h5i alternatives
Tools and sites you could use instead, ranked by how closely they match.
Greywall provides a deny-by-default sandbox for AI coding agents, with kernel-enforced isolation on Linux and macOS.
Open source
15 alternatives
ReviewCerberus analyzes Git branch differences and generates code review reports using AWS Bedrock or Anthropic API.
Open source
15 alternatives
promptfoo tests prompts, agents, and retrieval systems with evaluations and security testing.
Open source
16 alternatives
This repository contains code for PR-Agent, an open source tool for reviewing pull requests.
Open source
19 alternatives
rehydra scans LLM prompts for accidental personal information before they reach a model.
Open source
17 alternativesPopular in AI Code Review & Testing
Well-known listings from the same topic.
Prediction Guardpredictionguard.comGreptilegreptile.comGitAutogitauto.aipromptfoopromptfoo.devRefractionrefraction.devKatalonkatalon.com
h5i FAQ
Does h5i require migrating an existing web application?
No. For red-teaming, h5i works with any web services regardless of their framework and no migration to h5i-app is required. Building on h5i-app is only relevant to the formal verification workflow.
How is h5i installed?
Through an install script hosted at h5i.dev or in the repository, or by building from source with cargo. The websec, recon, and test capabilities are optional plugins chosen during installation.
How do AI agents use h5i, and what does the verification workflow involve?
Agents access the toolkit through a unified CLI and a skill that is written into the runtime they use, with activity visible in a local dashboard. For verification, h5i-app projects translate Rust logic into Lean 4, then build and check proofs and run mutations to test proof sensitivity.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.