"Resources for security testing, penetration testing, and bug bounty programs" matching MCP servers:

A comprehensive MCP server for automated bug bounty hunting and security reconnaissance, featuring over 28 specialized tools for subdomain discovery, vulnerability scanning, and traffic analysis. It integrates automated scope validation and professional reporting across multiple platforms like HackerOne and Bugcrowd to streamline security testing.

Provides access to over 40 industry-standard penetration testing tools, including Nmap, SQLMap, and Metasploit, within an isolated Kali Linux Docker container. It enables security professionals to perform comprehensive network reconnaissance, web application testing, and vulnerability research through natural language commands.

Exposes browser-testing capabilities—including navigation, clicking, typing, form submission, verification, and screenshots—so clients can discover the supported Playwright actions. It also builds structured testing requirements from a supplied website and task description, ready for plan generation and execution.

Enables AI agents to scan for verified, uncontested GitHub bounty issues and audit specific issue URLs before writing code, filtering out honeypots and competition.

Enables scanning GitHub bounties for pre-filtered, uncontested issues and auditing specific issues to detect honeypot traps before writing code.

Connects Claude and other MCP-compatible AI assistants to the AI Bounty Board, enabling natural language discovery, claiming, and submission of bounties.

Integrates 193 Kali Linux security tools with AI for intelligent penetration testing, CTF solving, and vulnerability assessment through automated workflows and expert knowledge base.

Orchestrates end-to-end testing of AI-powered incident remediation workflows through declarative YAML scenarios, fault injection, AI response evaluation, and automated command execution with comprehensive reporting.

Provides self-healing UI/API test automation via Plan-Generate-Run-Heal cycle, exposing MCP tools for test platforms to trigger batches and retrieve reports.

Provides emergency coding assistance by querying three AI coding models simultaneously through OpenRouter, with automatic premium fallback on rate limits, returning multiple expert opinions with cost and latency telemetry for debugging and problem-solving.

Enables autonomous AI agents and penetration testers to conduct authorized security audits with persistent cross-session memory, zero-trust secret scrubbing, dynamic OWASP/ASVS checklists, and hallucination-free exploit PoC generation from captured traffic.

A server that manages conversation context for LLM interactions, storing recent prompts and providing relevant context for each user via REST API endpoints.

Protects AI agents from threats like prompt injection, jailbreaks, and SQL injection through a multi-layer scanning pipeline. It also enables PII redaction and rehydration to ensure data privacy during LLM interactions.

Agent Security & Hallucination Gate (x402)

Enables building and evaluating LangGraph agents over a protocol-level MCP server to measure failure rates across four agent topologies.

An AI-centric MCP server that enables automated Xilinx Vivado workflows, including project management, synthesis, implementation, and timing analysis. It allows AI agents to drive hardware design processes while integrating directly with the official Vivado GUI for visual context.

Provides a hand-written MCP server integrated with a LangGraph agent to benchmark multiple agent topologies and measure their failure rates.

Provides automated security incident remediation tools for AWS, enabling real-time threat response by quarantining malicious S3 objects, restricting IAM access, and updating security groups.

Unifies 7,283+ detection rules from Sigma, Splunk ESCU, Elastic, and KQL into a single queryable interface via MCP, with a web dashboard and autonomous agent pipeline for detection engineering.

An AI-powered security agent that utilizes MCP tools and Groq LLMs to analyze Azure infrastructure, audit security groups, and identify storage misconfigurations. It enables users to perform natural language security assessments and ensure compliance with CIS Azure best practices.