Security Review

ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.

Paid x402 and MPP tools for agent discovery, payment safety, data, and DeFi.

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

Codebase intelligence for TypeScript and JavaScript: health, complexity, duplication, architecture, styling drift, and unused code from one graph. CLI, LSP, and MCP server. Zero config for over 100 frameworks.

Reverse engineer anything from your terminal or agent with one CLI and MCP server.

Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.

Code review that happens while your agent writes: deterministic checks on the lines it changed, quiet unless it can prove a defect, and learning from your team's fixes and dismissals. Works with Claude Code, Cursor, Codex, Cline and Windsurf.

React Native and Expo health check: upgrade blockers, store rules, crash risks, security findings

Electron release diff for security review: what changed in IPC, contextBridge, windows and hosts.

Code graph MCP: 81 languages, 88 frameworks, 72.7% fewer PR-review tokens, comprehension at parity

PII/secret redaction, email checks, sanctions screening and OSV vulnerability lookups for AI agents.

Deterministic security layer your AI can't be. 613 rules, 39 tools, CLI + doctor + host audit.

Deterministic SAST/SCA findings + fix guidance for your AI agent. Runs locally, no account needed.

The first open-source AI agent built for offensive security. Autonomous pentesting from your terminal.

Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.

Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.

ESLint plugin for Model Context Protocol (MCP) SDK security — follows tool arguments into shells, file paths, URLs, SQL and eval; catches credential leaks, untrusted text in model-facing descriptions and prompts, unhardened HTTP transports, shared statele

Evidence-backed AppSec for AI applications and agents. Powered by HAIEC.

Extenshi MCP server — bring the extension catalog (search, security, market research) and pre-publish scanning into your AI tools

Static analysis scanner for MCP server code and multi-tenant SaaS applications.