MCP servers for security scanning

DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.

CVE lookup via NIST NVD, CISA KEV, EPSS, and MITRE ATT&CK. 7 tools.

Scan your own website for vulnerabilities: DNS takeover, compromised CDNs, debug mode and more.

DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.

Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

Scan installed MCP servers for security vulnerabilities with 16 detection engines.

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

AI-powered security scanning using Black Duck Signal for vulnerability detection.

Scan for prompt injection, secrets, PII, and vet MCP servers before installation

Solidity smart contract vulnerability scan (Slither) for AI agents. Free preview; paid full report.

Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CISA KEV, EPSS)

Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is.

Queries live Google OSV.dev vulnerability intelligence for any PyPI, npm, Go, or Rust crate and r.

Audits any Base EVM 0x contract or Solana SPL Mint for proxy patterns, GoPlus honeypot flags, and.

Is a CVE exploited? CISA KEV, FIRST EPSS, CVSS and SSVC with a patch-first verdict. Free, no key.

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

Company filing/CVE snapshots, status and optional feedback. Remote MCP or local stdio. Free Phase A.

Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

PostgreSQL security for AI agents: CVEs, yanked releases, exploits, and upgrade paths

Scan any public GitHub MCP-server repo for security issues. 37 MCP-specific L1 rules, 8 languages.

AI-powered penetration testing. Launch scans, review findings, download reports.

Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups

Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings

MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.

MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.

MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.

Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

AWS security scanner with attack chain detection, IAM privilege escalation, and fixes

Safe, self-hosted ZAP operator for guided AI security scans and reports.

Vulnerability management across all ConnectSecure clients: exposure ranking, CVE impact, blind spots

Every Action1 endpoint, plus fleet-wide patch and vulnerability views across all your organizations.

Local-first MCP security scanner and CLI for AI-generated applications.

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

Codebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.

Analyze repos of any size - security scanning code analysis monorepo support

Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.

Security testing MCP server for penetration testing, forensics, and vulnerability assessment

DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks

Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.

Local security scanner for AI agents: SAST, SCA, secrets, IaC; verifies exploit and fix.

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.