Find vulnerabilities and insecure patterns in code.
Opinionated completeness auditor and runtime linter for Model Context Protocol (MCP) servers. Audits schemas, error boundaries, latency, and observability (Sentry/OTel) with automated AST codemod fixes.
CLI and MCP bridge for using JEB static analysis from AI agents
VibeSecurity — Auditoria de segurança para quem cria com IA. Secrets, vulnerabilidades e rotas sem auth.
A simple Node.js module that fetches and parses the latest Common Weakness Enumeration (CWE) list
Verified AI development. Scan your project, generate context, verify every change through a five-agent pipeline.
Security scanner for AI agent architectures - 220+ detection patterns and 5 runtime guard modules for prompt injection, SSRF, path traversal, credential exposure, MCP security, and OWASP ASI vulnerabilities
Xiezhi (獬豸) — AI white-box code audit agent. Placeholder release; the real package is coming.
Read-only scanner for the git settings that let a repository run code in a coding agent (Claude Code, Codex, Cursor, Copilot, Goose): fsmonitor, filters, hooks, aliases, includes, bare repositories in the tree. No dependencies, no network.
Deterministic, non-executing evidence reports for public npm MCP servers.
A zero-dependency MRI scan for your AI coding agent attack surface.
Code intelligence and deterministic verification for AI coding agents: symbol-level code graph, blast radius, dead-code analysis, and MCP servers for Claude Code, Cursor, and Codex
MCP server that gives AI agents (Claude, Cursor, Copilot) deep understanding of your codebase patterns, conventions, and architecture. Query patterns, security boundaries, call graphs in real-time.
Code Sentrix MCP Server - AI Security, AgentShield Anti-Prompt Injection, and Quality Gates for Cursor, Claude, Antigravity, and Windsurf
MCP server that scans for dead code and unnecessary complexity in TypeScript/JavaScript projects, then safely cleanses it. Works with Claude Code, Cursor, Antigravity, and any MCP-compatible CLI agent.
Xiezhi (獬豸) — AI white-box code audit agent. Placeholder release; the real package is coming.
Xiezhi (獬豸) — AI white-box code audit agent. Placeholder release; the real package is coming.
Offline security scanner for Node web apps and AI coding agents. OWASP rules with framework-specific fixes for 12 stacks, plus .claude/.cursor/.vscode config scanning. No telemetry.
MCP server for the seekingdata API: typed tools for live, fully sourced market data (crypto, FX, equities, commodities, macro, and more) plus Sightline security assessments - consult audit findings, re-audit diffs, and request scoped re-audits of a verifi
AI agent security platform — scan, fix, monitor, and pentest MCP servers, Claude skills, Codex plugins, Cursor extensions, and 5 more platforms. 227 rules across 17 threat categories.
Static security scanner that needs no parser: web/backend source and Apple platform configuration, as both a CLI and an MCP server.