MCP servers tagged threat-detection

8 live MCP servers tagged "threat-detection", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with threat-detection.

live servers

avg trust

AiSOC

Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.

Adrian

Runtime security monitoring and control for AI agents. Catches malicious tool use, prompt injection, and policy drift in real time, before the agent acts.

Panguard MCP Proxy

MCP Proxy — runtime interception for AI agent tool calls using ATR rules

Wazuh Openclaw Autopilot

Autonomous SOC layer for Wazuh using OpenClaw agents with MCP . Auto-triage alerts, correlate incidents, generate response plans with human-in-the-loop approval. Evidenc…

ADR

ADR secures enterprise AI agents through observability, security benchmarking, and threat detection. Deployed at Uber.

WireMCP Rs

Provide high-speed real-time packet capture and network analysis with Rust-powered parsing and threat detection for efficient MCP server use.

WRG-11/wrg-sigma-rules

rule production corpus across 11 MITRE ATT&CK tactic categories. Standalone server + Claude Code plugin distribution.

Firmis Scanner

AI agent runtime security scanner - detect malicious behavior in Claude Skills, MCP Servers, Codex Plugins, and more