"Image Generation" matching MCP servers:

Enables AI assistants to search and analyze vulnerabilities and exploits from multiple intelligence sources, including NVD, CISA KEV, ExploitDB, Metasploit, and more, with tools for CVE research, exploit analysis, and report generation.

Enables AI assistants to perform cybersecurity tasks including hash analysis, CVE lookup, HTTP header auditing, WHOIS/OSINT, payload decoding, password strength evaluation, and threat report generation.

Multi-engine container and system vulnerability scanning for AI agents. Wraps Trivy and Grype with cross-engine validation, SBOM generation, and IaC misconfiguration scanning.

Unified MCP server integrating NIST and OWASP security frameworks with live vulnerability data, enabling security searches, compliance mapping, threat modeling, and checklist generation.

A real security scanning MCP server for medical information systems, supporting port scanning, vulnerability detection, medical system identification, and compliance report generation.

Enables guided security evaluation of a virtual lab machine, including network scanning, HTTP/TLS analysis, OWASP Top 10 assessment, and Markdown report generation, without performing exploitation.

A security-focused server that integrates with Cursor IDE to provide real-time vulnerability detection, exploit generation, and security insights during software development.

Enterprise-grade zero-dependency security shield and runtime governance engine for MCP servers, providing OWASP MCP Top 10 audits, cryptographic tool call signing, AIBOM generation, and inline parameter firewall protection.

Enables AI agents to conduct authorized pentests and bug-bounty workflows with scope enforcement, audit logging, reconnaissance, safe vulnerability checks, payload/wordlist generation, and professional report generation.

A Model Context Protocol server for the Sliver C2 framework that exposes operator tools like listeners, implant generation, sessions, command execution, and file operations for LLM-driven adversary emulation.

Enables cybersecurity training, purple-team collaboration, and executive readiness through tools for scenario generation, attack simulation, telemetry analysis, incident investigation, forensics, and reporting with an immutable audit trail.

Enables read-only, evidence-led security audits of GitHub-hosted source code through explicit workflow primitives: repository reconnaissance, coverage-ledger planning, heuristic candidate leads, structured findings validation, independent verification gates, and JSON/Markdown report generation. It never clones, executes, or probes the target code, and marks runs incomplete until coverage and reviewer-verification gates pass.

Enables AI agents and external tools to perform reverse engineering on compiled binaries through IDA, including decompilation, disassembly, cross-references, type management, patching, signature generation, and dynamic debugging.

Enables LLMs to perform Active Directory penetration testing using tools like NetExec, Bloodhound, Nmap, Certipy, and John the Ripper. Automates vulnerability discovery, attack path analysis, and documentation generation for security assessments.

Enables AI agents to orchestrate 25+ security tools for penetration testing through natural language, automating scans, vulnerability detection, and report generation.

Enables MCP clients to carry out a compliant, non-destructive, auditable authorized security-testing workflow — project intake, scope reading, asset discovery, non-destructive verification, evidence collection, and report-draft generation with manual submission tracking — where every outbound action is gated by scope checks, one-time human confirmation tokens, rate limits, and append-only audit logging.

Enables static analysis, vulnerability scanning, gas optimization, formal specification verification, and audit report generation for smart contracts across Ethereum, Polygon, Arbitrum, Optimism, and Base. It also retrieves deployed contract information and audit history, persisting findings between sessions.

Enables professional penetration testers to run authorized reconnaissance, web/content scanning, brute-force checks, traffic capture, extraction sweeps, and reporting workflows through MCP-compatible transports. It supports engagement record management and client report generation with bearer-token/OIDC authentication.

Enables authorized penetration testers to run reconnaissance, web fuzzing, vulnerability scanning, brute-force/password cracking, traffic capture, privilege-escalation audits, wordlist generation, and client-report workflows over stdio, HTTP, or SSE with optional bearer/OIDC authentication.

Enables authorized penetration-testing workflows through MCP by exposing tools for network scanning, web fuzzing, subdomain enumeration, vulnerability scanning, brute-force checks, packet capture, and report generation with HTTP/STDIO/SSE transports and bearer/OIDC authentication.

Enables automated security code auditing using LLM and MCP, including AST parsing, taint analysis, dataflow tracing, and automated PoC generation for multi-language codebases.

MCP Server for Adversarial Co-Generation Engine Generates code and adversarial attacks from the same specification, at the same time — before a commit exists.

Enables authorized penetration testers to run reconnaissance, scanning, brute-force, exploitation, traffic capture, wordlist generation, and client-report workflows through MCP clients, with stdio/HTTP/SSE transport and OIDC bearer authentication.

Enables professional penetration testers to orchestrate reconnaissance, web/content scanning, brute-force checks, traffic capture, privilege-escalation auditing, wordlist generation, and client reporting through MCP transports with optional bearer/OIDC authentication.

This MCP server enables real-time injection fuzzing, exfiltration canary detection, least-privilege tool sandboxing, and cryptographic Merkle audit proofs for agent prompts, RAG context, and actions. It provides tamper-evident SHA-256 tree generation, logarithmic inclusion proofs, and verifiable integrity checks through MCP.

Enables MCP clients to run hardened, read-only radare2-based static binary triage tools, including disassembly, cross-reference following, string decoding, function renaming, and evidence-checked report generation without executing the sample.

Enables autonomous AI agents and penetration testers to conduct authorized security audits with persistent cross-session memory, zero-trust secret scrubbing, dynamic OWASP/ASVS checklists, and hallucination-free exploit PoC generation from captured traffic.

Enables professional penetration testers to run reconnaissance, network and web scanning, content fuzzing, vulnerability templates, brute-force checks, SQLi extraction, traffic capture, and engagement report generation through MCP clients.

Enables AI coding assistants and IDEs to run authorized offensive-security workflows over Model Context Protocol, including scope validation, reconnaissance, HTTP probing, secret and vulnerability scanning, playbook lookup, evidence management, and report generation.

Audits HAR captures locally with MCP tools for triage, findings, vendor blast radius, CSP generation, and sanitization—no network calls, redacted by default.