"Resources for security testing, penetration testing, and bug bounty programs" matching MCP servers:

Code-aware browser testing agent — reads your codebase, understands functionality, tests every element, reports with screenshots. Works as MCP server for Cursor/Claude Code or standalone CLI.

Enables AI assistants to write and debug integration tests by providing live access to DOM structure and executing code directly in test environments.

An LLM-driven API testing platform exposed over MCP, enabling declarative test definition and DAG-based execution.

Provides testing and quality assurance tools for AI agents via MCP, enabling generation of test cases, mock data, API mocks, coverage analysis, and assertions.

A lightweight, local-first MCP server for executing HTTP requests and managing API collections and environments without cloud dependencies. It enables testing APIs, handling authentication, and importing OpenAPI specifications directly within MCP-compatible workflows.

Provides tools for frontend testing including code analysis, test generation, test execution, and React component testing for Jest and Cypress frameworks.

Provides coding agents with visibility into test health through tools for flaky test detection, test quality linting, and LLM evaluation harness, enabling them to triage failures, review test quality, and check prompt changes for regressions.

A Model Context Protocol (MCP) server that provides testing and debugging tools for Stripe integrations, including test clock management, customer and product management, and subscription testing.

Real-time directory of every public VDP and bug bounty program

An MCP server that provides passive and low-impact active reconnaissance tools for authorized bug bounty and security assessments, enabling LLMs to perform structured recon and generate reports.

Web scraper and token compressor that converts HTML to clean markdown with 70-80% fewer tokens. Single-page compression and multi-page BFS crawling with auto-fallback fetch modes.

LLM routing proxy that cuts API costs 60-90% by auto-selecting the cheapest capable model across OpenAI, Anthropic, and Google. Provides stats, config, and model comparison tools via MCP.

An MCP server that gives AI coding assistants QA superpowers, enabling users to report bugs by pointing, clicking, or typing while automatically capturing diagnostic data for AI-driven test-feedback-fix loops.

Enables AI agents to perform comprehensive web application testing including visual, functional, performance, accessibility, and SEO analysis using browser automation without requiring API keys.

Enables developers and AI agents to discover, rank, watch, and draft submissions for Gibwork coding bounties through MCP tools, with optional wallet-authenticated SDK support.

Enables searching and retrieving live Solana bounties from Superteam Earn, including full bounty details and currently open feeds, without requiring an API key.

A working MCP server implementation in TypeScript/JavaScript that supports all major bounty operations (list/claim/submit/status). Includes example Claude conversations showing usage.

A shared, concurrency-safe ledger for LLM code audits. It enables multiple agents to collaboratively report, verify, and resolve bugs with deduplication and hallucination resistance.

Enables managing bugs and test cases in Google Sheets via Claude Code, with tools to list, search, filter failed, and update test cases.

A comprehensive testing suite demonstrating all Model Context Protocol (MCP) Apps features through interactive Weather Dashboard and 3D Globe viewer applications.