Skip to main content
Glama
745,161 tools. Updated 2026-11-05 05:13

"Website penetration testing and security vulnerability assessment tools" matching MCP tools:

  • Get detailed vulnerability information by CVE identifier, including severity scores, technical details, and exploitation status for threat assessment and patching prioritization.
    Apache 2.0
  • Query ZoomEye's vulnerability database by keyword to retrieve detailed security vulnerabilities including CVE IDs, severity, and affected versions for specific products or vendors.
    MIT
  • Reveal a website's technology stack—CMS, frameworks, JavaScript libraries, analytics, CDN, hosting, fonts, security tools—with categorized confidence levels.
    MIT
  • Execute a Metasploit Framework module non-interactively on a remote Kali machine via msfconsole, running one module with options and exiting cleanly for authorized penetration testing.
    MIT
  • Retrieve detailed information about a specific vulnerability using its ID to understand its impact and remediation steps during mobile app security assessment.
    MIT

Matching MCP Servers

  • A
    license
    A
    quality
    D
    maintenance
    Provides testing and quality assurance tools for AI agents via MCP, enabling generation of test cases, mock data, API mocks, coverage analysis, and assertions.
    5
    33 npm
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    Provides security tools (prompt injection detection, CVE lookup, version impact assessment) for MCP clients like Claude.
    -

Matching MCP Connectors

  • Free front-end security check for any website: a grade plus the secrets and keys it exposes.

  • Security basics of a website: HTTPS certificate, redirection, headers, mixed content, DNS filtering.

  • Assess organizational security posture by retrieving security scores, vulnerability trends, and risk assessments to identify and address security gaps.
    MIT
  • Confirm a security vulnerability by marking it as a true positive using the issue ID. This action validates identified security findings for accurate tracking and resolution.
    MIT
  • Check security response headers (HSTS, CSP, X-Frame-Options, etc.) for any public URL to verify browser-side security claims before trusting a product's baseline.
    MIT
  • Generate a STRIDE threat model to identify security gaps before launch, map auth flows and trust boundaries, and document risks for audits or penetration tests.
    MIT
  • Send HTTP requests with absolute precision for security testing. Preserve headers, raw payloads, cookies, and special characters exactly as provided. Logs all requests and responses for analysis.
    MIT
  • Discover available FedRAMP FRMR documents including security indicators, assessment standards, vulnerability data, change notifications, definitions, and authorization data to begin compliance analysis.
    MIT
  • Access comprehensive help for Azure penetration testing tools and view usage examples.
    MIT
  • Generate professional penetration test reports from collected security findings, formatted to PTES and OWASP standards, with support for multiple report types and output formats.
    MIT
  • Perform threat modeling and vulnerability assessments for auth changes, untrusted input, new endpoints, or audits, returning structured JSON findings from configured model providers.
    MIT