Security Review

Standalone SecureCode MCP server — scan, map, fix, and attack tools for AI coding assistants. Works without the VS Code extension.

Static MCP conformance checker: audits an MCP server source tree against the MCP 2026-07-28 standard and emits a conformance-diff table (file:line | present | absent | non-conforming | verdict).

Arko by DevSecAI: AI security scanning for developers and AI agents.

Check a backend's architecture from its source. Reads TypeScript, Python and Prisma/TypeORM/Mongoose schemas, then fails the build on architecture violations.

CRAP metric CLI for TypeScript: combines cyclomatic complexity and test coverage to find risky code, with a bundled cross-agent AI skill.

Pre-checks a model change before GPU time or traffic: memory, layout, serving config, pins.

Ask your AI what breaks before you change Salesforce. Offline, read-only, cited answers.

Local stdio MCP server for cached, loop-aware JS/TS diagnostics (Oxlint, tsc, Biome, ESLint).

Deterministic Roblox and Luau standards checks: deprecated APIs and out-of-order section headers, as an agent hook, a commit hook, or a CI step.

Scans RAG content/scraped pages for indirect prompt injection

Reverse engineer anything from your terminal or agent with one CLI and MCP server.

MCP server for accessing CIRCL CVE SEARCH API - search CVE data, vulnerabilities, and security information

Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.

Reverse engineer anything. Port it anywhere. One MCP server for coding agents.

MCP server for hexvero: lets a coding agent diff two Electron releases and inspect app.asar, IPC, contextBridge and binaries, with file and line, without running them.

CVE scanning for npm/pip/cargo dependencies via OSV

Multi-language repository map for agents and humans: MCP tools, dependency graphs, symbol indexes, impact review, and bounded source evidence.

Security guard MCP server for Vibe Coded projects — scans Frontend and Backend across every layer and language, plans + tests + fixes vulnerabilities. Claude Code and VS Code Anthropic Claude extension compatible.

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance