"Website penetration testing and security vulnerability assessment tools" matching MCP servers:

Checks public IPs, domains, CVE IDs and software versions for confirmed vulnerabilities and exposure, using NVD version ranges, CISA KEV, EPSS, distro backports and published exploits. All API keys are optional.

Enables pediatric CKD nutrition assessment by calculating PRNT energy/protein targets, evaluating dietary intake against those targets, and screening for PEW risk, with support for dialysis, vegetarian diets, and edema corrections.

Enables accessibility testing of websites and HTML content using axe-core and IBM Equal Access engines. Supports WCAG compliance checking, multi-viewport testing, and provides detailed violation reports with remediation guidance.

Enables scraping of emails, phone numbers, and social profile links from website domains. Supports batch processing of up to 20 domains and can find company websites by keyword/company name.

Provides AI-visibility scoring and site auditing capabilities for websites, enabling agents to check how sites appear in AI engines like ChatGPT and Perplexity, run full SEO/security audits, and monitor changes over time.

AI-powered VMware NSX DFW microsegmentation and security. Manage distributed firewall policies, security groups, Traceflow, and IDPS with 20 MCP tools.

Provides coding agents with visibility into test health through tools for flaky test detection, test quality linting, and LLM evaluation harness, enabling them to triage failures, review test quality, and check prompt changes for regressions.

Unified MCP server integrating NIST and OWASP security frameworks with live vulnerability data, enabling security searches, compliance mapping, threat modeling, and checklist generation.

Enables AI-assisted vulnerability management by connecting Claude Desktop to local Nessus and Tenable Vulnerability Management, allowing natural-language queries for scan management, threat intelligence enrichment, and prioritized remediation planning.

Protects AI agents from threats like prompt injection, jailbreaks, and SQL injection through a multi-layer scanning pipeline. It also enables PII redaction and rehydration to ensure data privacy during LLM interactions.

MCP server that provides a 216-rule, framework-aware Kotlin/JVM security analyzer, enabling AI coding agents to query real security findings while writing code.

Relays a result screenshot to Slack so you can review a coding agent's output without opening the app.

MCP server for personal knowledge management providing AI-powered tools for semantic search, audio transcription, image generation, and PPT creation.

14 atomic MCP tools for AppSec and AI Security engineers: source/schema/prompt audit primitives, JWT inspect, HTTP diff, pentest atoms (default creds, GraphQL introspect, phpggc, interactsh OOB), and a defensive helpers library that fixes the bugs the detectors flag. SARIF output, PyPI Trusted Publishing with Sigstore provenance.

MCP server that exposes tools to route natural language queries to typed IDs, describe catalog entries, and list repository verification commands for the m-dev-tools organization.

Provides security audit primitives for MCP servers, agent tool schemas, and system prompts, along with pentest utilities like JWT inspection and HTTP diffing.

Enables building and evaluating LangGraph agents over a protocol-level MCP server to measure failure rates across four agent topologies.

Enables AI assistants to keep Rojo serving and auto-connected for Roblox Studio projects and to import FBX, OBJ, GLB, or GLTF models through Studio's own 3D Importer on Windows.

An MCP server that provides a persistent sandbox for AI coding agents to explore codebases server-side, returning only compact summaries to reduce context consumption.

Integrates Checkov, Semgrep, Bandit, and ASH to provide comprehensive code security analysis for AI coding assistants.

Enables extraction of recipes from PDFs or JPG files and conversion into structured HTML, with interactive region selection and OCR via a web GUI.

Enables interaction with Picus Security's Breach & Attack Simulation API, allowing natural language queries for simulations, threat library searches, and agent management through MCP-compatible clients.

Enables AI agents to interact with Google NotebookLM and Gemini API for document analysis, deep research, and notebook creation with enterprise-grade security including post-quantum encryption and 14 security layers.

Enables comprehensive vulnerability scanning using Nuclei scanner with support for single targets, network ranges, and cluster-wide security assessments with customizable severity levels and automated scheduling.

MCP server for automated AWS security scanning — 19 modules, risk scoring, zero write operations.

Enables AI agents to fetch one or many web pages concurrently and receive clean, LLM-ready Markdown with navigation, ads and boilerplate stripped away, plus extracted metadata such as title, description, author, Open Graph tags and canonical URL. It runs locally over stdio with no API key or account, requiring only a single command.

Enables agents to classify AI systems, scope relevant risks and controls, investigate evidence, propose remediations, and explain results through read-only tools, reference resources, and prompts.

Enables MCP clients to research package vulnerabilities, CVE records, known exploitation, exploit probability, and package metadata through seven read-only tools backed by OSV, NVD, CISA KEV, FIRST EPSS, and deps.dev, returning source context and pagination.

Enables AI agents to intercept, inspect, modify, and replay HTTP, WebSocket, TCP, and UDP traffic through mitmproxy, with controlled security constraints and process isolation.

Standalone MCP server exposing only the security-classified tools from Shade Browser, enabling Brave CDP browser automation across 20 isolated profile slots. Built on FastMCP and Playwright Python.