Security Scanning

Audit GitHub repos for malicious and supply-chain code before you depend on them.

Verifiable trust infrastructure for AI agents. Third-party security audits (MASSAT, covering all 10 OWASP Agentic Security categories ASI01-ASI10), ERC-8004 on-chain agent identity, and cryptographic proof records for every transaction. Agents hire verified services via MCP and REST, paid with x402…

Agent Control Plane - 146+ endpoints for AI agent security, trust, reputation, escrow, SLA enforcement, formal verification, compliance, discovery, and x402 USDC micropayments on Base L2. Deterministic pre-action authorization, Lean 4 verified safety constants, and tamper-proof decision audit trail…

Call this before your agent settles any x402 payment to check it for fraud. TollWarden answers 'is this payment safe to send?' and 'is this 402 offer safe to pay?' — catching payments to attacker-controlled addresses injected into content the agent just read (prompt-injection-triggered payments), r…

Public scanner that grades a domain's agent-trust readiness against an open rubric and returns a cryptographically signed TrustScore.

Generate SBOMs, scan vulnerabilities, and analyze dependencies from local projects or Git repos.

Scan a web page for accessibility, security, privacy, quality and SEO issues, with fixes.

Stealth web extraction, Polymarket alpha, and on-chain pre-trade gating via x402 on Base.

Deterministic prompt-injection detection & sanitization for AI agents via x402 on Base.

Security auditor for AI agent configurations. Scans Claude Code setups for vulnerabilities, misconfigs, and injection risks.

Blitz Strike — a universal MCP security-audit toolbelt. BLITZ sweeps the attack surface, EAGLE-EYE traces source-to-sink, STRIKE verifies live. 57 attack chains, 130-tool catalog, intelligence data layer. One server, every agent.

Access control for AI agents and MCP servers: allow, hold for approval, or block each tool call

Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.

Cyber-first freestyle local AI agent

MCP server for automated web accessibility scanning with Playwright and Axe-core.

Deterministic security layer your AI can't be. 613 rules, 39 tools, CLI + doctor + host audit.

The first open-source AI agent built for offensive security. Autonomous pentesting from your terminal.

Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.

MCP server that lets AI agents inspect your own PC and Android device read-only with osquery, ClamAV, Wazuh and adb (runs the Python server; needs Python 3.11+)

Test any MCP server: connection, tools, security, login, resources and prompts. Hard facts, no AI judging.