- Conduid
- Marketplace
- #infosec
MCP servers tagged infosec
69 live MCP servers tagged "infosec", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with infosec.
Memtriage
Triage memory-dump artifacts: strings, IOCs, suspicious processes from a dump export
Nimbus MCP
Nimbus - AWS Security Assessment MCP Server | 45 Tools | Multi-Region Scanning | TRA Reports | CIS/NIST/PCI-DSS Compliance
Embedaudit
Embedding / vector-store drift and poisoning audit
Dirsight
Analyze web content-discovery output (ffuf/gobuster) into ranked endpoints
Auditrail
Tamper-evident audit-log aggregator with hash-chained attestation
Ghaudit
Audit a GitHub org's security posture (branch rules, 2FA, secrets) from an export
Graphqlmap
Analyze GraphQL introspection for risky fields, depth, and authz gaps
Cspbuilder
Generate and audit a Content-Security-Policy from a page's resources
Dnsaudit
DNS posture & misconfiguration scanner — SPF/DKIM/DMARC/DNSSEC/CAA
Dastlite
A headless, config-as-code DAST runner that crawls an authenticated web/mobile-API surface and fires a curated active-scan ruleset, emitting deduplicated SARIF.
Edrgap
EDR coverage & bypass detector — reconciles MDM + EDR + AD inventories
Redpath
Active Directory attack path mapper — minimum-cost paths + remediation priority
Adversa
LLM red-team harness — OWASP LLM Top 10 + MITRE ATLAS attack packs
Prefetchparse
Surface program-execution evidence from Windows Prefetch exports
Cipherdetect
Detect & crack classical ciphers (caesar/vigenere/xor) by scoring
Ttphunt
Hunt MITRE ATT&CK techniques across logs with a rule pack
Apiseclint
Lint OpenAPI specs for security gaps (authz, rate-limit, data exposure)
Iamlint
Lint cloud IAM policies (AWS/GCP/Azure JSON) for least-privilege violations
Certpatrol
TLS cert lifecycle & rogue-issuance watch via Certificate Transparency