"Alibaba.com" matching MCP connectors:
Offline methodology engine for authorized penetration testing, CTF, and security research.
A skeptical senior-engineer code reviewer over MCP: risk-scans unified diffs, flags AI-generated-code tells, reports complexity hotspots, scans for leaked secrets, and runs an OWASP security pass — real analyzers, no external APIs. Free tier, no signup.
55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Exposes FEDLIN's public security scanners as agent-callable tools over Streamable HTTP.
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.
Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.
Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Formally-verified injection/exfiltration detector for AI agents (MCP-02).
CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.
Scan your home network and local machine for security risks, open ports, weak Wi-Fi, unknown devices. Providing with a trust score and clear explanations.
Security audits for WordPress plugins and themes — 62 verification layers, fix plans and SBOMs.
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
Programmatic control of the Hiro security platform: scans, tasks, plans, and approvals.
Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)
Deep security scans of repos you own from your editor: dependency CVEs, SAST, git-history secrets.
Browser QA agent that won't return a false green: verified PASS/FAIL + access-control probing.
A paid remote MCP for developer endpoint scanner MCP, built to return verdicts, receipts, usage logs