Search

Evidence-backed AppSec for AI applications and agents. Powered by HAIEC.

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

TypeScript utilities for building LLM-optimized ESLint plugins - AST helpers, type utilities, security benchmarks, and SARIF output

[glama](https://glama.ai/mcp/servers/@msaad00/agent-bom) 🐍 🏠 ☁️ 🍎 🪟 🐧 - AI supply chain security scanner with 18 MCP tools. Auto-discovers 20 MCP clients, scans dependencies for CVEs (OSV/NVD/EPSS/CISA KEV), maps blast radius from vulnerabilities to exposed credentials and tools, runs CIS benchmarks, generates CycloneDX/SPDX SBOMs, and enforces compliance across OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, and EU AI Act.

CCS v1.0 - Conformance Protocol for Agentic Runtime Systems

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.

Modern, fast penetration testing CLI — record browser interactions once, replay with security payloads, and find vulnerabilities like XSS and SQLi automatically. A lightweight, pluggable alternative to legacy security scanners.

Curated, vendor-neutral open-source tools, standards, benchmarks and labs for AI Security Engineering, organized by lifecycle (Discover, Design, Build, Break, Defend). From the AI Security Engineers Community.

Cryptographic runtime receipts for MCP servers and clients — signed Ed25519 audit evidence for every tool call.

Cryptographic runtime receipts for CrewAI agents — signed Ed25519 audit evidence for every tool call.

Cryptographic runtime receipts for Microsoft AutoGen agents — signed Ed25519 audit evidence for every tool call.

Cryptographic runtime receipts for OpenAI Agents SDK — signed Ed25519 audit evidence for every tool call.

Cryptographic runtime receipts for LangChain/LangGraph agents — signed Ed25519 audit evidence for every tool call.

AI antivirus for developer agents: protect Codex, Claude Code, Cursor, Gemini, OpenCode, plugins, skills, MCP servers, and AI harnesses before tools run.

Credential isolation proxy for AI agents. Injects API keys at the network boundary so your agent never sees the raw credential. Supports domain allowlists, agent auth, policy enforcement, and audit logging.

MCP server for auditing AWS AI/ML workload security — Bedrock IAM, prompt injection signals, posture reports

Security scanner for MCP servers in Claude Code: tool poisoning, shadowing, rug pulls and risky configuration.

Security scanner for GitHub repos, Agent Skills, Plugins, and MCP servers. 17 scanners. Zero dependencies.

Security intelligence MCP for agents to review MCPs, Skills and tools before installation.