"An overview of penetration testing (pentest)" matching MCP servers:

Enables developers and product owners to scan a codebase and extract a readable business overview—features, roles, access control, data model, and endpoints—along with findings on missing or inconsistent rules, and generate shareable HTML or Markdown reports and diagrams.

Unified penetration testing MCP server for Claude Desktop providing 34 security tools for reconnaissance, web scanning, code analysis, and authenticated testing.

Code-aware browser testing agent — reads your codebase, understands functionality, tests every element, reports with screenshots. Works as MCP server for Cursor/Claude Code or standalone CLI.

An MCP server that extends kali-mcp with cloud (AWS/Azure/GCP), API/GraphQL/JWT, OSINT, container/K8s, IaC/SAST, mobile, binary analysis, and reporting tools, all accessible via an HTTP MCP endpoint.

Provides coding agents with visibility into test health through tools for flaky test detection, test quality linting, and LLM evaluation harness, enabling them to triage failures, review test quality, and check prompt changes for regressions.

Enables authorized Android security testing with static and dynamic analysis, Frida instrumentation, storage inspection, and traffic interception via MCP tools.

A Model Context Protocol server for automated security vulnerability assessment, combining OWASP Dependency-Check dependency scanning with custom code vulnerability detection, and generating detailed HTML and JSON reports.

Enables checking project files like Dockerfile, .nvmrc, and CI workflows to determine whether pinned runtime, database, and OS versions are still supported, providing end-of-life dates, latest patches, and upgrade targets for 470+ products.

Enables AI assistants and developers to analyze code for language-specific best practices and idiomatic patterns across programming languages, CI automation, and configuration formats.

A universal AI-powered testing server built on the Model Context Protocol (MCP). Allows AI agents to inspect, execute, test, monitor, debug, and report on software projects.

Automates Java/Maven test generation, JaCoCo coverage analysis, and Checkstyle checking through MCP tools. Enables iterative improvement of test coverage and code style until quality goals are met.

Provides GDB and clangd-based tools for debugging C++ programs, enabling step execution, variable inspection, diagnostics, and combined runtime-static analysis.

An MCP server that enforces unit testing standards by linting code and guiding agentic coding tools (like Gemini CLI or Claude Code) to follow best practices in test-driven development.

An MCP server that extends AI coding assistants with deterministic, algorithmic capabilities such as code analysis, fault localization, and formal verification, enabling an autonomous engineering team within the IDE.

Validates Mermaid diagrams with comprehensive grammar parsing supporting 28+ diagram types. Processes markdown files, ZIP archives, and direct input with detailed error reporting and enterprise-grade performance capabilities.

Enables MCP clients to inspect, edit, and validate Arma Reforger addons in Workbench, including Enforce Script source, prefab/world files, resource GUIDs, and Workbench startup diagnostics.

Enables Android APK reverse engineering and Flutter runtime injection through a six-step pipeline of decompile, analyze, synthesize, inject, patch, and repackage. Provides MCP tools for authorized security research and penetration testing.

14 atomic MCP tools for AppSec and AI Security engineers: source/schema/prompt audit primitives, JWT inspect, HTTP diff, pentest atoms (default creds, GraphQL introspect, phpggc, interactsh OOB), and a defensive helpers library that fixes the bugs the detectors flag. SARIF output, PyPI Trusted Publishing with Sigstore provenance.

Cartograph is an MCP server that provides agent-native code intelligence by building a queryable code graph from a repository using tree-sitter and SQLite. It offers tools for symbol lookup, call graph traversal, blast radius analysis, and architecture overview to help coding agents answer structural questions about code.

Enables testing, explaining, debugging, and generating regular expressions directly within editors like Claude Code, Cursor, and VS Code Copilot, without leaving the editor.