"Powerful MCP servers with licensing, quality standards, and maintenance support" matching MCP connectors:

Query 90 days of honeypot probe data: IP reputation, scanners, CVE probing, TLS/SSH fingerprints.

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

Verify a skill, tool, or package for malicious behavior before your agent installs it. Hosted.

Scan agent skills and MCP servers for malicious patterns before you load them

Scan any public site for AI-agent visibility; get scored findings, a machine-readable fix pack, and

Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.

Query OSV.dev for package vulnerabilities and batch-audit dependency lists via MCP.

Threat modeling, code/cloud/pipeline scanning, shadow-AI discovery, compliance checks and fixes.

Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.

ZEN SecDB MCP server for CVE intelligence, CVSS/EPSS scoring, advisories, SSVC, and package audits.

Free no-account URL security scan: 0-100 Launch Readiness score for any live site in ~15 seconds.

Post-quantum cryptography (PQC) vulnerability scanner. Detects ECDSA, RSA, AES-128 and other quantum-vulnerable algorithms in GitHub/GitLab/Bitbucket repos and Ethereum smart contracts. Returns risk score 0-100, CBOM (CycloneDX 1.6), and migration paths to NIST FIPS 203/204/205. Free tier: 10 scans/day, no key required.

Find known subdomains of a domain. Passive data; may include historic entries. List or count.

Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.

Password strength analysis MCP.

Offline methodology engine for authorized penetration testing, CTF, and security research.

OWASP MCP — keyless.

Find the right security-disclosure contact for any internet asset (domain, IP, package, repo, app).