Security Scanning

A blazingly fast MCP server for code intelligence - multi-language parsing, semantic search, call graphs, security scanning

Pre-use security audit for MCP servers, with optional Docker-sandboxed runs

MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.

Production readiness for vibe-coded apps. 52 checks for security, reliability, and performance.

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

MCP security scanner and config linter for AI coding agents: finds exposed secrets, risky commands, broad permissions and invalid MCP servers in Claude Code, Cursor and VS Code (Copilot) configs. Local-first, no telemetry.

Email MCP server for Gmail, Outlook and any IMAP mailbox, hardened against prompt injection

MCP server that wraps Google's OSV-Scanner to scan Java, JavaScript, Python, Go, Rust, .NET, and PHP dependencies for known vulnerabilities and recommend fixes

Security guard MCP server for Vibe Coded projects — scans Frontend and Backend across every layer and language, plans + tests + fixes vulnerabilities. Claude Code and VS Code Anthropic Claude extension compatible.

Local-first context engine for AI coding agents. Pre-indexes your codebase into a dependency graph and feeds any MCP agent only the code that matters, so it stops rediscovering your repo before every change. Fable-5-level results from Opus 5 on SWE-bench

Zero-Trust PII & secrets sanitizer for AI agents with in-memory local redaction.

MIT-licensed memory, policy, and continuity framework with MCP server. For local dev and private automation.

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

The security-native AI coding agent. Six Sec-Test security personas, compliance-first /scraper, a business documents & research suite, and multi-agent Compose orchestration — spec-driven workflow engines in one terminal-first CLI.

AI Agent Skill for NSAuditor AI — gives any AI coding agent built-in knowledge of NSAuditor's MCP tools, schemas, plugins, and security audit workflows.

Check an MCP server, skill or plugin before your agent uses it: tool text on record, changes graded.

Scans Greenhouse, Lever, Ashby, Workday, Rippling for roles in any category. Clay-ready.

InnerWarden Community: open-source guardrail for AI coding agents. Screens the shell commands and MCP/tool calls your agent runs and returns allow / review / deny, before it runs.

Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs

Open-source autonomous AI coding agent CLI & native MCP client (free Claude Code alternative). Desktop & browser automation, workspace tools, 5-layer guardrails, Docker sandbox, and custom OpenAI/NVIDIA NIM providers.