Search

Supply-chain security scanner for MCP servers and Claude Code projects — catch tool-poisoning, command injection and risky permissions before you install.

Security co-pilot for AI agents. Scan for vulnerabilities, verify governance, audit MCP servers, and generate compliance reports — all from Claude, Cursor, or any MCP client.

MCP server for AI-powered smart contract security analysis. $5 USDC/scan via x402. Trained on 27,681 real Sherlock/Code4rena findings.

Static security auditor for AI-agent configuration: Claude Code, MCP servers, Cursor, Codex, Copilot, Gemini CLI and more. 116 rules, SARIF output, OWASP LLM Top 10 mapping.

🐍 📇 🏠 🍎 🪟 🐧 - Real-time security framework for MCP servers that detects and blocks malicious AI agent behavior by analyzing tool call patterns and intent across multiple threat detection engines.

Local-first, deterministic security scanner for Model Context Protocol (MCP) servers. Cross-tool toxic-flow analysis, Unicode-smuggling decode, prompt-injection & supply-chain detection, with an auditable 0–100 Trust Score.

Security scanner + AI agent firewall. Blocks secret/PII exfiltration in real time. 752 rules, 82 MCP tools (agent-scan, mcp-audit, guard-action, generate-sbom, dep-reachability, license-compliance), AST taint analysis. Offline, zero telemetry, zero depend

Monitor external URLs referenced by AI agent skills and MCP tools for bait-and-switch content changes

ESLint plugin for MongoDB and Mongoose security — detects NoSQL operator injection, unsafe queries and regex, hardcoded connection strings, and missing TLS.

Security proxy that automatically wraps MCP servers with real-time monitoring and policy enforcement

Self-contained Mobile & IoT SAST/DAST/pentest toolkit: MobSF + Frida + objection + mitmproxy + rooted emulator, as a desktop app, CLI and MCP server.

MCP server: security scanner for AI-generated code — the agent scans its own code/diff before committing. Detects injection, SSRF, hardcoded secrets, weak crypto, unsafe deserialization, TLS-off, XSS. Deterministic, free, no LLM.

Belay is an open-source, local-first security layer for AI coding agents (Claude Code, Codex, Cursor, OpenClaw, Hermes Agent and MCP) that blocks dangerous commands, secret leaks, and prompt injection at the tool-call boundary in under 100ms — no LLM in the decision path by default, no cloud, no phone-home.

Read-only attack-path tools: reachable routes to sensitive assets, and what a fix would cut.

Read-only attack-path tools: reachable routes to sensitive assets, and what a fix would cut.

AlienVault OTX Endpoint Security Scanning MCP Server with VirusTotal Integration

Open-source framework for AI-layer security testing — finds AI-agent weaknesses and writes the regression tests that close them.

A security graph reporting tool, with agentic workflows, AI chat assistant, and automation for CVE remediation and graph data population.

Harden your AI coding agent in 60 seconds. Security hooks, audit logging, and posture scoring for Claude Code, Cursor, Windsurf, and more.

Scans Model Context Protocol (MCP) server configurations for common security issues: overprivileged tools, missing auth, prompt injection surface, unsafe defaults.