Skip to main content
Glama

Related Servers

Alternatives to Gandoki

No user-submitted related servers found.

    Related Servers

    • A
      license
      A
      quality
      A
      maintenance
      Open-source AWS security scanner with Attack Chains, Breach Cost Estimation, and MCP Server. 47 checks across 15 AWS services. Every finding includes copy-paste remediation (CLI + Terraform) and a dollar-risk estimate with verified source. First free standalone AWS security MCP server - Prowler and Wiz require paid SaaS.
      7
      164 PyPI
      73
      MIT
    • A
      license
      C
      quality
      B
      maintenance
      Provides a container-native offensive security MCP toolkit that runs 179 tools — executable-backed scanners plus deterministic, evidence-first vulnerability probes — against authorized engagement targets. Enables scope-guarded pentesting workflows with persisted JSON evidence artifacts and high-confidence versus review-only findings.
      179
      Apache 2.0
    • A
      license
      A
      quality
      A
      maintenance
      agent-bom is an open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. The default scan profile in MCP server mode exposes 8 MCP tools. Additional profiles provide inventory, findings, compliance, graph, and runtime workflows. See the published Glama release for its packaged version.
      8
      723 PyPI
      36
      Apache 2.0
    • A
      license
      B
      quality
      B
      maintenance
      Enables AI agents to run deterministic, fully local static security and compliance audits of code, configurations, and dependencies through 32 MCP tools covering 24 vulnerability categories. It also detects the project stack, generates risk reports and checklists, suggests stack-aware remediations, and re-validates fixes to confirm vulnerabilities were eliminated.
      32
      1
      MIT
    • F
      license
      Not graded
      quality
      D
      maintenance
      Enables local security scanning and compliance gap analysis for code and text, detecting secrets, PII, and OWASP vulnerabilities, and assessing readiness across major frameworks like NCA, ISO 27001, NIST CSF, and SOC 2.
      -

    TDQS

    B3.2/5.0

    Scored across 7 tools

    Disambiguation4/5

    Most tools are clearly distinct: the two scan tools differ by source (inline list vs. file), and job/finding retrieval tools are separated by granularity (list/get/diff). The only mild overlap is scan_domains vs. scan_file, which descriptions resolve adequately.

    Naming Consistency5/5

    Every tool follows a consistent verb_noun snake_case pattern (scan_domains, get_job, list_jobs, diff_jobs, explain_finding). No mixed conventions or vague verbs.

    Tool Count5/5

    Seven tools is well-scoped for a domain scanning and findings-review service, covering the full scan-to-inspect workflow without bloat or thinness.

    Completeness4/5

    Covers scanning, job inspection, finding retrieval, explanation, and cross-job diffing, which is a coherent lifecycle. Minor gaps: there is no tool to accept/retract findings even though get_finding references those states, and no job cancellation.

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues