Registry › Compare › Garak vs Snyk Agent Scan

Garak vs Snyk Agent Scan

Garak leads on trust: 67.1/100 (Grade B) against 63.3/100 (Grade C), a 3.8-point gap. Garak leads on maintenance and adoption, and rests on broader evidence; Snyk Agent Scan leads on supply-chain integrity and transparency.

B Garak 67.1

the LLM vulnerability scanner

NVIDIA/garak · #452 overall · #7 Security & Guardrails · coverage A (4/5)

Choose Garak if maintenance and adoption matter most.

+6.7Adoption: 9.9k GitHub stars against 3.2k
+1.8Maintenance
A vs CEvidence coverage: 4 of 5 independent signal types, against 2

C Snyk Agent Scan 63.3

Security scanner for AI agents, MCP servers and agent skills.

snyk/agent-scan · #588 overall · #8 Security & Guardrails · coverage C (2/5)

Choose Snyk Agent Scan if supply-chain integrity and transparency matter most.

+2.6Safety / Integrity: 100% of recent commits signed, against 72%
+0.8Transparency: OSSF Scorecard 5.7 against 4.7

Where they differ

9.5

Safety / IntegritySnyk Agent Scan +2.6

12.1

12.5

TransparencySnyk Agent Scan +0.8

13.3

19.5

MaintenanceGarak +1.8

17.7

15.1

AdoptionGarak +6.7

8.4

-0.3

Runtime calibrationSnyk Agent Scan +1.3

+1.0

1 dimension identical: Identity 10.8 · Full evidence table

An independent, evidence-based trust comparison of Garak and Snyk Agent Scan, two Security & Guardrails projects in the HVTracker registry. Scores come from public, checkable signals — supply-chain provenance, OSSF Scorecard, maintenance, and adoption — not popularity.

Full evidence

Signal	GarakNVIDIA/garak	Snyk Agent Scansnyk/agent-scan
HVTrust score	67.1	63.3
Evidence grade	B	C
Coverage grade	A	C
Overall rank	#452	#588
Rank in Security & Guardrails	#7	#8
GitHub stars	9.9k	3.2k
Last updated	1d ago	today
Build provenance	No	No
OSSF Scorecard	4.7 / 10	5.7 / 10
License	Apache-2.0	Apache-2.0
Downloads	13k/wk	—
Trust dimensions (points earned)
Safety / integrity / 25	9.5	12.1
Identity & provenance / 18	10.8	10.8
Transparency / 17	12.5	13.3
Maintenance / 20	19.5	17.7
Adoption / 20	15.1	8.4
Runtime capability surface (full matrix)
MCP server	—	Implemented
External providers	8 — Amazon Bedrock, Anthropic, Cohere, …	1 — Anthropic
Requires API keys	Yes	Yes
Plugin surface	plugins	—
Provenance drift	Match	—

Open in the live compare tool → Garak profile Snyk Agent Scan profile More Security & Guardrails →

How to read this: HVTrust (0–100) weighs supply-chain signals (provenance, OSSF Scorecard, signed commits, open license) alongside real-world adoption, scaled by an evidence-confidence factor. Grade bands: A ≥ 80, B ≥ 65, C ≥ 50, D < 50. Signals refresh daily. Full methodology v4.4 →