VulnForge MCP
Related Servers
Alternatives to VulnForge MCP
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityDmaintenanceAutomatically detects security vulnerabilities in AI-generated code, scanning for hardcoded secrets, injection flaws, XSS, weak cryptography, authentication issues, path traversal, and vulnerable dependencies across JavaScript, Python, Java, and Go.6 npm2MIT

shipsafe-mcpofficial
AlicenseAqualityCmaintenanceEnables AI coding assistants to scan projects for security issues such as leaked API keys, missing Supabase RLS, open Firebase rules, unauthenticated routes, and hallucinated packages, then fix and verify the results.81MIT- AlicenseAqualityCmaintenanceAn AI-powered security audit tool that analyzes codebases for vulnerabilities using real-time data from MITRE CWE and npm audit. It enables deep analysis of authentication, API security, and dependencies to provide structured findings and remediation steps.27 npm1MIT

Sekrd Security Scannerofficial
FlicenseAqualityDmaintenanceEnables deep security auditing of web applications directly from AI IDEs including Cursor and Claude Code. Scans URLs for vulnerabilities, returns security scores with SHIP/BLOCK verdicts, and provides specific fix prompts for remediation.3-
Cybrium MCP Serverofficial
AlicenseNot gradedqualityBmaintenanceProvides AI coding assistants with real-time security scanning superpowers, including SAST, secrets detection, dependency CVE scanning, and web vulnerability assessment.10 npmApache 2.0
Draugrofficial
AlicenseNot gradedqualityAmaintenanceSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.7Apache 2.0
TDQS
Scored across 5 tools
The three audit tools are clearly distinguished by layer (web, API, DB), and inject_patch is a distinct action. full_scan overlaps with the combined audits, which could cause minor confusion about when to use it versus individual audits, but its end-to-end purpose is clear.
All tools use snake_case with the vulnforge_ prefix, which is consistent. However, audit_web/audit_api/audit_db and inject_patch follow a verb_noun pattern, while full_scan uses an adjective_noun pattern, a minor deviation.
Five tools is well-scoped for a focused vulnerability auditing/patching server. Each tool targets a specific layer or action and earns its place without redundancy.
The surface covers detection across web, API, and DB layers plus automated patching and a full-scan orchestrator, providing a complete detect-and-remediate cycle. Minor gaps include no dedicated patch verification or scanning beyond these three layers (e.g., dependencies, cloud configs).