Security Review

SecuraAI security scanner CLI and MCP server — static analysis, recon, header audit and injection testing via AI agents.

Open-source security scanner for Model Context Protocol (MCP) servers. Audits Claude Desktop, VS Code, Cursor, Windsurf, and 12 more AI tools for secrets, prompt injection, supply-chain risks, and 17 security checks.

Was my machine hit by an npm supply-chain attack? Scans every lock file, global install and the npm cache against 100,000+ known-malicious packages. Plus pre-install guardian, pre-open repo audit against fake-interview malware, vulnerability audit, SBOM a

RepoSpector as an MCP server — repository graph and retrieval context for Claude and Codex. No API key.

Model Context Protocol server exposing the circle-ir SAST engine as structured tools for LLM agents (Claude Desktop, Claude Code, Cursor, cognium-ai).

Local multi-repo code graph over MCP. Blast radius, call graphs, and memory anchored to code.

MCP Server for Semgrep Integration - static code analysis with AI

MCP server that maps function and component dependencies in Haskell and ReScript codebases — built to help LLMs trace affected code flows for test generation.

CVE/vulnerability intelligence MCP server — 41 tools, 11 sources: NVD, EPSS, KEV, GHSA, OSV, Shodan, VulnCheck, Vulners, Nuclei, Metasploit, CIRCL, ATT&CK

Universal code development MCP server — search, analyze, navigate, review any codebase. 29 tools, semantic search, AST parsing, security scanning, dead code detection, complexity heatmaps, DB schema parsing, API discovery, IaC analysis, CI/CD parsing, mon

Mine the architecture rules your TypeScript repo already enforces, with the evidence attached.

AI-powered security scanning using Black Duck Signal for vulnerability detection.

Static compliance-controls checker for UK Online Safety Act & ICO Children's Code. CLI + MCP.

A small autonomous team-agent runtime powered by Rust

AI writes. SPARDA proves. Deterministic, offline security gate for AI edits.

Local-first MCP code intelligence: 37 tools — hybrid search, blast-radius, diff review, memory.

Local-first MCP security scanner and CLI for AI-generated applications.

Zero-dependency linter that blocks AI-generated comment slop. Enforces a one-line, why-only comment policy via pre-commit hook, IDE plugin and CI.

MCP server that wraps Google's OSV-Scanner to scan Java, JavaScript, Python, Go, Rust, and .NET dependencies for known vulnerabilities and recommend fixes

MCP server and CLI that tells your coding agent what it is about to break: blast radius, dead code, and health for any local codebase. Runs entirely on your machine.