- Conduid
- Marketplace
- #vulnerability-scanner
MCP servers tagged vulnerability-scanner
146 live MCP servers tagged "vulnerability-scanner", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with vulnerability-scanner.
Cookieaudit
Audit Set-Cookie flags (Secure/HttpOnly/SameSite) from a response dump
Headerscan
Grade HTTP security headers (CSP/HSTS/XFO) A-F from a response dump
Baadiff
Scan a repo or infra manifest for HIPAA Security Rule gaps and produce a Business Associate readiness scorecard.
Vendorvet
Third-party / vendor risk questionnaires with SBOM cross-ref
K8saudit
Audit Kubernetes manifests against CIS-style security rules
Binhunt
Game/desktop binary integrity scanner that fingerprints executables, detects common packers/obfuscators, and diffs against a known-good baseline to catch tampering.
Fhirlint
Validate FHIR R4/R5 resources and bundles against profiles (US Core, etc.) with precise, line-level error reporting.
Obscan
Conformance and security linter for Open Banking / FAPI APIs: validates OAuth flows, consent scopes, and PSD2 endpoints against the spec.
Sanctscan
Screens counterparties and transactions against OFAC/EU/UN sanctions lists with fuzzy name matching and explainable hit scoring.
Dripcheck
Lint email sequences and drip campaigns for deliverability: SPF/DKIM/DMARC, link health, unsubscribe presence, and CAN-SPAM/GDPR compliance.
Vulny Agent Scan
MCP skill: run real vulnerability scans (nmap + nuclei + CVE matching) on domains and IPs you own, straight from your AI agent. Pay-per-scan.
Strike
Active adversarial security scanner for Model Context Protocol (MCP) servers: runtime attacks, LLM-as-judge, and an adaptive agent.
Mcpsnare
Active security scanner that pentests MCP (Model Context Protocol) servers. Triggers and out-of-band-confirms real vulns (RCE, SSRF, path traversal, auth bypass) with graded confi…
Sentrymcp
A static + runtime security scanner for MCP (Model Context Protocol) servers
Nimbus MCP
Nimbus - AWS Security Assessment MCP Server | 45 Tools | Multi-Region Scanning | TRA Reports | CIS/NIST/PCI-DSS Compliance
Vuln Analyzer
Agentic vulnerability analyzer for Claude Code — runs grype via MCP, ranks findings, dispatches reachability / context / remediation sub-agents per top-5 vuln.
AI Protect
AI-application security assurance pipeline: tier-aware SAST · DAST · AI red-team scanning with a findings dashboard, CVE intel feeds & auto-remediation. For AppSec & platform team…
Sbomgate
Continuous SBOM diff & vulnerability watch with maintainer-change tracking
Embedaudit
Embedding / vector-store drift and poisoning audit
Phiscrub
Stream-scan logs, CSVs, and free-text notes for PHI (names, MRNs, SSNs, dates, addresses) and redact or tokenize in place.
Trackblock
Family phone stalkerware audit — MVT-class iOS/Android forensics
Promptmirror
Prompt-injection & indirect-injection scanner for any LLM context input
Auditrail
Tamper-evident audit-log aggregator with hash-chained attestation
Ghaudit
Audit a GitHub org's security posture (branch rules, 2FA, secrets) from an export
Cspbuilder
Generate and audit a Content-Security-Policy from a page's resources
Semsift
Lightweight semantic-aware SAST that runs curated taint rules over diffs only, so PRs get fast incremental SAST instead of whole-repo scan fatigue.
Sbomx
Generates a CycloneDX SBOM for mobile apps by unpacking native libs and bundled SDKs, then matches components against known-vuln and tracker/privacy databases.
Dastlite
A headless, config-as-code DAST runner that crawls an authenticated web/mobile-API surface and fires a curated active-scan ruleset, emitting deduplicated SARIF.
Securityscan MCP
Security for AI agents: 8 MCP tools - config audits, secret redaction, skill vetting, network scans, agent-native checkout
Keel Sec Guard
Automated AI security auditor and SAST scanner powered by Google Gemini. Runs locally via CLI/Agent Skill and in CI/CD via GitHub Actions.
Iso20022
Validates, lints, and diffs ISO 20022 / pacs / camt payment messages and translates legacy MT into MX with schema-aware errors.
Zfuzz CLI
The Rust-native security scanner behind every Zfuzz tool. SAST, SCA, secrets, MCP/skill audit, Sealed Vault — one $0 binary. npx @zfuzz/cli scan .
Groundforge MCP Inspector
GroundForge MCP Inspector is a local-first CLI that inspects MCP servers before agents connect to them. It discovers tools, prompts, resources, schemas, and metadata, then flags r…
Hallumark
LLM hallucination & grounding auditor for RAG systems
Apiseclint
Lint OpenAPI specs for security gaps (authz, rate-limit, data exposure)
Iamlint
Lint cloud IAM policies (AWS/GCP/Azure JSON) for least-privilege violations
Valvur
Offline security scanning for AI-generated code: seven open-source scanners and AI-specific checks in one command. It finds secrets, vulnerable, hallucinated and malicious depende…
Agent Cve Scanners
Free offline scanners for 53 CVEs in 9 AI-agent frameworks + MCP tool pinning. No telemetry.
Coldforge
Render personalized cold-outreach sequences from Markdown templates + a contacts CSV, with spam-score linting and per-send dry-run preview.
Depguard
Dependency vulnerability scanner over OSV.dev with CISA KEV actively-exploited flags. No API key.
Scanner
Security auditing tool for MCP (Model Context Protocol) servers — 27 checks, web dashboard, SARIF output, compliance mapping
Security Scanner MCP
MCP server for Nuclei vulnerability scanning with cluster integration
Safe Skills
🛡️ Zero-trust security gate & vulnerability scanner for AI agent skills (Claude Code, Antigravity, OpenCode, Codex). Powered by NVIDIA SkillSpector.
Cerberus
Autonomous multi-agent security auditing platform with runtime exploit verification.
Audit
Security auditing tool for MCP servers — 10 scanners, CLI & MCP server mode, SARIF output, zero external dependencies
Security Agent
No description published.