"Security" matching MCP servers:

Integrates authoritative security compliance frameworks (ISO 27001, NIST 800-53, OWASP ASVS, NIST SSDF) into AI-assisted development, offering control lookups, cross-framework mappings, build-time guardrails, and automated audit evidence generation.

Enables searching and bidirectional mapping of 1,451 security controls across 262 SCF-mapped frameworks, including ISO 27001, NIST CSF, DORA, and many others, through natural language queries.

Enables local security scanning and compliance gap analysis for code and text, detecting secrets, PII, and OWASP vulnerabilities, and assessing readiness across major frameworks like NCA, ISO 27001, NIST CSF, and SOC 2.

Enables AI assistants to audit company domains for Trust Center platforms, compliance certifications, disclosed sub-processors, DNS identity and security records, email hardening, and live status-page health. It supports single-domain and parallel batch audits with structured risk scores and GRC summaries.

Agent-friendly query layer over the ASD Information Security Manual, served via MCP. Enables agents to discover and interrogate ISM controls using plain language queries and coverage tracking for IRAP review.

Enables MCP-compatible agents to query security checklists, protocols, and framework mappings to safely build and operate AI agents, with tools for checklist runs, protocol lookup, mapping lookup, and threat search.

Enables AI assistants to retrieve exact, cited security-deposit law facts for all 50 US states, compare states side by side, list covered states, and check deposit deduction letters against state rules.

Website audits for AI agents: cookie consent and tracking, Core Web Vitals and lost revenue, WCAG 2.2, email/DNS security (SPF, DMARC) and AI-search readiness, merged into one prioritised fix plan.

MCP server for answering questions about Apache Software Foundation policies, offering tools to list, retrieve, and search policy documents on releases, licensing, branding, security, infrastructure, and incubator topics.

Provides automated EU AI Act compliance tools, including risk classification, role determination, transparency disclosures, content watermarking, deepfake labeling, and security threat detection.

Enables AI assistants to conduct a 30-question information security and GDPR/NIS2 compliance screening for Polish SMEs, with fully local scoring, area-based results, gap identification, and prioritized remediation steps.

102-tool MCP server for AI-native compliance. PII scanning, HIPAA/GDPR/PCI-DSS/SOX/CCPA automation, file intelligence, workflow execution, audit trails, security events, and team management.

Enables sanctions and watchlist screening of persons and entities against public lists such as Rosfinmonitoring, OFAC SDN, EU consolidated, UK OFSI, and UN Security Council from any MCP client.

Provides AI-ready access to US/UK nonprofit data and OSS vulnerability intelligence via MCP, with 10 tools and no API key required.

Provides AI agents with free web tools for converting HTML to Markdown, running EU compliance scans, profiling pages, and checking security headers, with no authentication or dependencies.

Converts natural language security requirements into validated Cerbos YAML policies with automated testing and red-team analysis, enabling AI governance with zero-trust guardrails for tool calls, data access, and compliance frameworks.

Enables security remediation as one auditable transaction: freezing pre-change exposure, computing blast radius, gating on policy and approval, binding execution receipts, verifying post-state, and rolling back on failure, all sealed in a SHA-256 evidence chain.

Enables querying and analysis of FedRAMP documentation, compliance requirements, and security controls through structured tools that search markdown guidance, analyze FRMR datasets, and track regulatory changes.

Enables AI agents to interact with the SCF Controls Platform for security compliance, including browsing controls, tracking implementation, managing evidence, assessing risks, and monitoring vendors via natural language.

Exposes the five Enternovate security tools as 23 Model Context Protocol tools, enabling agents to scan attack surfaces, query knowledge graphs, audit websites, check email security, and run POPIA compliance assessments via a single MCP connection.

Enables MCP-compatible assistants to query Ecuadorian legislation and perform local static audits of software repositories for privacy, security, and compliance risks.

Provides offline access to Spanish national security framework (ENS) measures, enabling querying of Annex II, applicability matrices, and audit checklists for compliance assessments.

Lets AI coding agents generate and manage threat models, controls, assumptions, compliance mapping, and evidence programmatically via the Mipiti security posture platform.

Provides comprehensive HIPAA compliance guidance for developers building healthcare applications. Offers tools to identify PHI, understand encryption requirements, navigate business associate rules, and ensure compliance with HIPAA Security and Privacy Rules.

MCP server providing 100% coverage of the CISO Assistant GRC REST API through action-routed tools for compliance, risk management, and other security domains.

Enables searching and browsing public vendor trust center records, looking up vendors by domain, and auditing project dependencies against vendor security documentation.

Provides AI assistants with read-only access to Secureframe's compliance data, enabling querying of security controls, tests, users, vendors, and more across frameworks like SOC 2 and ISO 27001.

Enables security work such as threat modeling, scanning, compliance checks, and remediation through AI assistants using the Model Context Protocol.

Enables MCP clients to carry out a compliant, non-destructive, auditable authorized security-testing workflow — project intake, scope reading, asset discovery, non-destructive verification, evidence collection, and report-draft generation with manual submission tracking — where every outbound action is gated by scope checks, one-time human confirmation tokens, rate limits, and append-only audit logging.

Enables AI clients to perform Brazilian legal calculations, including monetary correction and debt settlement using live official indices, interest, penalties, and attorney fees, plus labor, social security, family, and criminal calculators.