Search

Claude-powered security scanning: CLI and TypeScript SDK that drives the Claude Agent SDK through bundled scan skills and seals results into a verifiable scan contract (JSON, SARIF, Markdown).

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.

Security & quality scanner for AI agent extensions — Claude skills, MCP servers, Cursor rules and agent instruction files. Like npm audit, but for the stuff you install into your coding agent.

Security gateway for MCP JSON-RPC traffic - session capture, per-tool policy engine, argument inspection, secrets scrubbing, audit exports. Rust gateway + TypeScript console.

Model Context Protocol (MCP) server for Firewalla MSP API - Provides real-time network monitoring, security analysis, and firewall management through 28 specialized tools compatible with any MCP client

Cybersecify -- Security agent for AI developers. Scan MCP servers, check packages, audit dependencies, verify repos, check agent threats. Works in Cursor, Claude Desktop, any MCP client.

📇 🏠 🍎 🪟 🐧 - Deterministic security proxy (iptables for MCP) that intercepts tool calls, enforces YAML policies, scans for secret leakage, and logs everything. No AI, no cloud.

29 security rules for MCP servers & agents — tool poisoning, prompt injection, exfiltration, attack chains, stale-trust caching. Ships semgrep ruleset + zero-dependency lite scanner.

🏎️ 🏠 - Conversational recon interface and MCP server powered by httpx and asnmap. Supports various reconnaissance levels for domain analysis, security header inspection, certificate analysis, and ASN lookup.

Aegis: universal AI agent security. One decorator, any framework, full protection. Deterministic capabilities, argument-level policy, data provenance, MCP guard, sandboxed execution, and tamper-evident audit.

Security auditor for MCP servers. Finds tool descriptions carrying hidden instructions, annotations that contradict their own schema, over-shared credentials, and pairs of tools that together form a path off your machine. Runs entirely offline.

Map and audit any mobile app from your AI agent. Every screen and the route to it, plus WCAG 2.2, performance, store and security audits, on Android and iOS. No SDK, no test IDs, no source code.

Audit MCP servers for security risks and config leaks; generate Markdown + SARIF reports and optionally fail CI via policy gates (stdio/HTTP JSON-RPC, profile-based scoring).

Self-hosted application security platform: SAST, DAST and SCA with AI false-positive validation. OWASP Top 10/CWE mapping, SBOM export, CI/CD integrations and MCP server.

🐍 ☁️ 🏠 🐧 🪟 - MCP server for Thales CDSP CAKM integration, enabling secure key management, cryptographic operations, and compliance monitoring through AI assistants for Ms SQL and Oracle Databases.

Open-source WAF bypass toolkit — 4,300+ payloads, 35+ recon checks, 98 WAF/CDN vendors, AI-assisted bypass, security hardening. For pentesters, bug bounty hunters, and DevSecOps.

Autonomous-pentest MCP server — one-command install of 140+ security tools (Pentest-MCP + HexStrike + MobSF) with auto-wired AI clients (Claude Code, Gemini CLI, OpenAI, DeepSeek, Ollama).

AI-powered security scanner delivered as an MCP server and CLI. Detects secrets, auth bugs, SQL injection, and vulnerable dependencies — and opens fix PRs — directly inside Cursor, Claude Code, and VS Code.

An MCP server that gives AI coding agents (Claude Code, Codex, Cline) safe, structured network & security reconnaissance tools — DNS, WHOIS, TLS, HTTP headers, and port scanning. For authorized testing and education only.

MCP server for secure coding and compliance — full MITRE CWE corpus, ISO 27001, NIST 800-53, OWASP ASVS, NIST SSDF, ISO 27017 — with official cross-framework mappings and enforcement hooks