Security Review

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.

LSP call graph for coding agents: a symbol's callers, callees, tests and live files in one call.

The security-native AI coding agent. Six Sec-Test security personas, compliance-first /scraper, a business documents & research suite, and multi-agent Compose orchestration — spec-driven workflow engines in one terminal-first CLI.

Your codebase companion for JavaScript/TypeScript, in the browser, the terminal and your AI agent: a live dependency map, impact and call sites, affected tests and patch coverage, review order, new-only CI gates (SARIF, GitLab), git hooks, a status line a

AI Agent Skill for NSAuditor AI — gives any AI coding agent built-in knowledge of NSAuditor's MCP tools, schemas, plugins, and security audit workflows.

Offline SAP ABAP/RAP tools for AI agents: lint, Cloud readiness, released APIs, knowledge.

Coupling analysis for coding agents: what breaks if this symbol or file changes. No language server required.

Evidence-first code analysis for agents in TypeScript, JavaScript, and Svelte codebases.

Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs

Auditable, conserved AST code intelligence for AI agents. JS/TS, Python, Go, Rust, Java, C/C++, C#.

LLMGRAPH: a local code-structure engine for AI coding agents, started over MCP. This package is the launcher; the engine comes from a per-platform package.

MCP server providing SonarLint code analysis for Claude Desktop and other MCP clients

An MCP server supporting LLM requests for CodeQL development tools and resources.

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1700+ vulnerability rules with AST & taint analysis, LLM-powered semantic code review, auto-fix. For Claude Code, Cursor, Windsu

Read-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

Canary-proof security checks for MCP servers -- verifies real behavior instead of pattern-matching code.

Agentic CVE remediation platform for Node.js. Correlates threat intelligence, applies policy-governed fixes, and delivers auditable remediation outcomes across CI/CD pipelines, agent workflows, and service portfolios.

Standalone launcher and agent integration for the PT Application Inspector MCP proxy.