- Conduid
- Marketplace
- #vulnerability-management
MCP servers tagged vulnerability-management
29 live MCP servers tagged "vulnerability-management", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with vulnerability-management.
Viper
🛡️ VIPER: Stay ahead of threats with AI-driven vulnerability intelligence. Prioritize CVEs effectively using NVD, EPSS, CISA KEV, and Google Gemini insights, all on an interactive…
Reconmap
Reconmap is a collaboration-first security operations platform for infosec teams and MSSPs, enabling end‑to‑end engagement management, from reconnaissance through execution and re…
Vulnometry
Measure what a vulnerability is worth to your business, not how severe it is in the abstract. Business Exposure Index scoring over NVD, EPSS, CISA KEV, OSV and GHSA.
Wazuh Autopilot
Autonomous AI SOC for Wazuh SIEM — 11 security-expert agents triage, correlate, investigate and plan responses 24/7, every action gated by two-tier human approval. Runs on OpenCla…
Yamory MCP Server
MCP server for yamory vulnerability management cloud
Rapid7
Model Context Protocol server for the Rapid7 InsightIDR SIEM platform
Futurevuls
Model Context Protocol server for FutureVuls vulnerability management service integration (Office Environment with Proxy Support)
Echelongraph
EchelonGraph CVE and internet-exposure data as an MCP server: CVEs with EchelonGraph multi-source scores, CISA-KEV and EPSS, plus a per-CVE internet-exposure footprint derived fro…
OpenVAS MCP
MCP server that bridges AI agents to OpenVAS / Greenbone Vulnerability Management.
Sec Recon Agent
Type-safe LLM vulnerability triage on Pydantic AI + MCP. Ten typed tools (NVD, OSV, KEV, EPSS, Exploit-DB, ATT&CK, SBOM, Nmap) ground a validated TriageReport with a deterministic…
Defender Xdr MCP
Self-hosted, strictly read-only MCP server for Microsoft Defender XDR. Bring your own AI to your Defender telemetry — delegated per-user auth, no write path, production guardrails.
Threat Intelligence Pipeline
Correlates every NVD CVE with CWE, CAPEC, ATT&CK, D3FEND, OWASP, CISA KEV, Vulnrichment SSVC, and EPSS, with APT links only where MITRE ATT&CK cites the CVE. Search-first web app,…
Vulnerability Intelligence MCP Server
Built for security professionals, developers, and DevSecOps teams who need reliable vulnerability intelligence integrated directly into their development workflow.
GreenboneMCP
Greenbone/OpenVAS MCP Server for AI-assisted Vulnerability Management
Tenable Sc MCP Server
Production-ready MCP server for Tenable Security Center with intelligent caching. 90% token savings, 1000x faster responses.
Tenable Attack Mapper
MCP server that maps Tenable Security Center findings to the MITRE ATT&CK framework, then lets you ask your LLM (Claude Code) to analyze exposure by specific tactic or technique i…
DefectDojo MCP Server
MCP server for DefectDojo OSS with capability parity to DefectDojo Pro's built-in MCP, plus a deterministic analytics superset. Uses the caller's own API token, so DefectDojo's pe…
Tenable Activity MCP
MCP server exposing the Tenable Vulnerability Management audit log as analysis tools: per-actor baselines, API-key usage attribution, and explained anomaly detection.
Prescryb
MCP server for CVE/config remediation orchestration: SSH inventory, OSV/NVD lookups, CIS/DISA STIG-mapped Ansible playbook suggestions.
Cveasy MCP
MCP server for CVEasy AI — connect Claude Desktop & Claude Code to your live CVEasy install. Thin client over the CVEasy REST API.
Arche
Build apps with Claude using Archē, a context framework that helps it work autonomously from idea to live app
Remedify
Turn vulnerability scan results (Trivy/Grype/Sysdig) into deterministic, OS-specific remediation plans — commands, backport explanations, Ansible playbooks, MCP server
Cpe Skills
Comprehensive CPE (Common Platform Enumeration) toolkit — SKILLS, Go SDK, CLI & MCP integration for parsing, matching, generation, storage and NVD integration. ≥91% coverage, 108…
Security Advisor
An oss tools based MCP server framework to analyze source code for security vulnerabilities. It runs SAST, SCA, DAST, and IaC inspection on the repository contents.
Vulnerability Registry MCP
MCP server exposing a legacy vulnerability database to LLM-powered security analysts
Keendreams Security
Open source memory layer for security agents. Every fact cites its evidence; only a human can confirm one. Runs in your own Cloudflare account.
Dsh Vulnerability Remediation Proof
Evidence-only DSH plugin for vulnerability remediation closure
Qwiet
Qwiet AI (formerly ShiftLeft, now part of Harness) is an application security testing platform delivering SAST, SCA, IaC, container, and secrets scanning in a single scan, with re…
Microsoft Defender MCP
Rust MCP server for Microsoft Defender XDR and Defender for Endpoint: 88 tools for hunting, threat intelligence, vulnerability management, and gated response.