Security-hardened file organizer with smart categorization and duplicate detection.
AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets.
Guidance for answering vendor security questionnaires. Every result carries the page it came from.
Self-hosted MCP server: 26 deterministic dev, security, and EVM tools.
Submit files and URLs to a malware sandbox, poll scans, fetch reports, hashes and IOCs.
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Fallax is a phishing simulation and security awareness training platform. Read your results.
UK compliance documentation for the EU AI Act, Worker Protection Act 2024, and UK GDPR.
Defensive vulnerability intelligence search across public CVE/NVD and GitHub advisory APIs with CVSS.
Check dependencies against CISA's real Known Exploited Vulnerabilities feed.
Add a cookie consent banner that blocks trackers before consent and records proof of consent.
Live JDM auction search, SEV compliance checks, and import cost calculator.
Read-only smart-contract security intelligence for autonomous agents.
AlphaKey IDaaS MCP Server — Manage SSO, MFA, users, apps, and security policies through AI IDE.
External security monitoring for Laravel apps: list domains, trigger scans, read issues and fixes.
Honeypot detection & token risk scan for ERC-20s. Risk score 0-100, tax, source verification.
Check a California data broker's next DROP 45-day deletion-request check-in deadline.
Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.
Talk to a specialist compliance AI from the harness you already use.
SitesAI App for civil/earthworks contractors: leads, jobs, shifts, dockets, sites, compliance.
Paid AI utilities for web comparison, code checks, document extraction, security, and research.
MLS compliance for edited listing photos: classify edits, write disclosures, verify provenance.
Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.
Email security and AI discoverability scores for any domain, with the exact record or tag to fix.
About Security MCP servers
Security servers let agents take part in defensive work: scanning dependencies and containers, querying vulnerability databases and threat intelligence feeds, reading audit logs, managing secrets in vaults, checking identity and access configuration, and producing compliance evidence. Several wrap established tools so an assistant can run a scan and explain the findings in plain language.
These servers are powerful on both sides, so run them with the same controls you apply to the underlying tools: dedicated credentials, read-only where possible, and no production write access without a human in the loop. Prefer servers from the tool's own vendor or an established security team, and review what each tool sends to third-party services.