Best Security tools

600+ tools for JavaScript analysis, security auditing, browser automation, and reverse engineering in a single MCP server.

Securely run LLM-generated code in isolated containers across 7 languages and 3 backends.

Real-time malicious package detection and software supply chain security for AI agents and IDEs.

Fail-closed policy gate for AI agent actions with local evaluation and pre-tool authorization hooks.

Local-first antivirus for AI agents that detects secrets, prompt injection, unsafe commands, and supply-chain risks.

Brazilian KYC/KYB via MCP: face auth + liveness, document OCR, and onboarding orchestration.

Brazilian KYC/KYB platform with biometrics, OCR, ICP-Brasil e-signature, and onboarding for AI agents.

Fraud prevention and order risk scoring for Brazilian e-commerce, via MCP.

Identity verification, liveness checks, and AML screening for AI agents via Jumio's KYX platform.

Order risk scoring, device intel, and fraud lists for Konduto via MCP.

Real-time fraud scoring and chargeback feedback for Brazilian e-commerce orders via MCP.

Run Onfido identity verification and KYC checks — applicants, documents, checks, workflows — from your AI agent.

MCP access to Persona's identity verification and KYC API — inquiries, accounts, and reports.

Brazilian identity + KYC verification: CPF/CNPJ lookup, OCR, face matching, liveness detection, PEP/watchlist screening.

Website QA tool for coding agents: audit SEO, performance, security, accessibility with 273 rules and exact fixes over MCP.

AI-powered security analysis and automation through CrowdStrike Falcon platform integration

AI-powered threat hunting & incident response for Elasticsearch/OpenSearch with 139 MCP tools and 6,060 detection rules.

Auto-fetch and visualize DMARC email authentication reports in a lightweight dashboard.

AI-powered reverse engineering and malware analysis via MCP with 120 tools for static/dynamic analysis, forensics, and SAST.

AI-powered packet analysis with tshark—security audits, threat detection, and network deep-dives in plain English.

Encrypted shared workspaces for AI agents—one link, read-write access, server cannot see content

Query VirusTotal API for comprehensive security analysis of files, URLs, IPs, and domains.

AI agent security middleware: 7 MCP tools for prompt injection detection, PII scanning, command safety, and data exfiltration blocking.

Security scanner for AI agents: blocks prompt injection, detects fake packages, audits MCP servers, and scans code vulnerabilities.

Deterministic security scanning with no model or API key, plus governed coding tasks for humans and AI agents.

Manage Auth0 applications, APIs, actions, and logs using natural language through Claude, Cursor, or Windsurf.

AES-256-GCM encrypted secrets for Next.js with no external vault required.

Append-only, signed, on-chain-verifiable agent action log for auditing AI agent behavior.

Access and manage 1Password credentials and secrets directly from your AI agent via the CLI.

Security-hardened NotebookLM MCP with post-quantum encryption, Gemini Deep Research, and 17 security layers for enterprise compliance.

AWS security scanner that finds attack chains, IAM escalation paths, and prioritized fixes.

Safe, self-hosted OWASP ZAP operator for guided AI security scans and reports.

Agentic memory for cyber threat intelligence. STIX graphs, actor aliasing, offline RAG, Sigma/YARA.

Server security audit (413 checks), hardening, and fleet management across 4 cloud providers.

Easily find and fix security issues in your applications leveraging Snyk platform capabilities.

Audit infrastructure for AI coding agents with evidence-backed review and policy gates.

AI agent tools for Open Security Controls Assessment Language (OSCAL)

Manage Zscaler Zero Trust Exchange via 400+ tools — ZPA, ZIA, ZDX, ZCC, ZTW, ZMS, EASM, and more.

Local-first MCP security scanner and CLI for AI-generated applications.

Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.

Fair-price checks, leaderboards, and Ed25519 receipt verification for x402/MPP services.

Python MCP server: fair-price checks, leaderboards, Ed25519 receipt verification for x402/MPP.

MCP server exposing Signet cryptographic signing, verification, and content hash tools over stdio.

Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.

AI agent identity, permissions, trust scores, and tamper-evident audit trails via Vorim AI

AI agent identity, permissions, trust scores, and tamper-evident audit trails via Vorim AI

OAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation.

Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation

Secure secrets proxy for AI agents — manages API keys so agents never see raw credentials.

Security scanner and graph for agentic infrastructure — agents, MCP, runtime, and blast radius.

55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.

AI safety middleware — detects self-harm and criminal intent in LLM prompts.

Intent-bound action authorization for AI agents: policy, human approval, and a signed audit trail.

Git-native policy layer for AI agents: check_action verdicts against rules approved via PR.

Sign and verify W3C Verifiable Credentials so AI agents can cryptographically authorize actions.

Abnormal Security email threats, cases, and reporting in your terminal and your AI agents.

Every Action1 endpoint, plus fleet-wide patch and vulnerability views across all your organizations.

Cross-account Blumira findings, detections, and agents in one offline-searchable store.

Every CrowdStrike Falcon MSP operation, plus a Flight-Control-aware local store that answers

Every Huntress endpoint, plus a local SQLite mirror that delivers fleet-wide incident, coverage

Pattern-based and LLM-powered security review for Claude-generated code with agentic commit analysis.

Harden APIs with authentication, authorization, rate limiting, and input validation.

Prevents AI agents from bypassing git hooks with --no-verify and similar flags

XSS prevention, CSRF protection, and mobile app security patterns for frontend applications

Cedar policy enforcement with cryptographic receipts for every Claude Code tool call.

Binary reverse engineering and malware analysis tools for authorized security research

Require human approval before AI agents post PR reviews, comments, merges, or CI config changes.

Validate SOC2, HIPAA, and GDPR compliance with automated secrets scanning and regulatory checklists.

SAST analysis, dependency scanning, and container security in one plugin

Cedar-gated tool calls with Ed25519 receipts and offline verification for Claude Code.

Deep vulnerability scanning and automated patching for your code, verified by agent consensus before reporting.

Pattern-based and LLM-powered security review for Claude-generated code with agentic commit analysis.

AWS DevOps and Security agents for incident investigation, code review, vulnerability scanning, and penetration testing.

Perform security audits on your codebase to identify vulnerabilities and risks.

Implement GDPR compliance, data privacy engineering, and privacy-by-design for enterprise B2B applications.

Comprehensive B2B security assessments and enterprise compliance validation for SaaS platforms.

Review legal documents and ensure regulatory compliance for app development.

Enforce code quality and security standards with SonarQube's 7,500+ issue types and secrets scanning in your agent coding loop.

Manage Zscaler cloud security platform policies, access, and incidents across ZPA, ZIA, ZDX, and more.

Unified Auth0 authentication setup for any framework with auto-detected guides for login, MFA, Organizations, and more.

WorkOS integration skills for authentication, SSO, directory sync, and access control.

Build cybersecurity applications on CrowdStrike Falcon Foundry with UI, workflows, and API integration skills.

Operational and API skills for CrowdSec engine, bouncers, WAF, and Console cloud management.

Run DAST security scans and transform findings into prioritized fix tasks for your codebase.

Query StackHawk platform API for security findings, posture reporting, and app management.

Scan code for vulnerabilities, secrets, and IaC issues using Aikido Security.

OAuth/OIDC, IdentityServer, and ASP.NET Core identity architecture skills for Claude Code

Scan agent-generated code for security vulnerabilities with Semgrep

Author, deploy, and execute CrowdStrike Falcon Fusion workflows with live action discovery and schema validation.

Connect Claude Code to JFrog to manage, secure, and govern your software supply chain.

Scan dependencies for vulnerabilities and get security recommendations from Sonatype intelligence.

Connect Claude Code to Vanta for security and compliance management

Find exploitable vulnerabilities in web applications and REST APIs with NightVision DAST scanning.

Catch API security issues during development with automated audit, scan, and remediation.

Expert backend security coding for input validation, authentication, API security, and vulnerability prevention.

Security auditor for code and architecture review during feature development.

Expert security auditor for DevSecOps, vulnerability assessment, and compliance frameworks.

Expert backend security coder for input validation, authentication, API security, and vulnerability prevention.

Expert firmware extraction, analysis, and vulnerability research for embedded systems and IoT devices.

Expert in secure frontend coding: XSS prevention, CSP configuration, and client-side vulnerability fixes.

Expert security auditor for DevSecOps, vulnerability assessment, and compliance frameworks.

Expert malware analyst for defensive research, threat intelligence, and incident response

Expert in secure mobile coding: input validation, WebView security, and mobile-specific vulnerability fixes.

Cedar policy author and reviewer for Claude Code tool authorization rules.

Verify Ed25519-signed receipts, detect tampering, and audit hash-chained audit trails.

Expert binary analysis and reverse engineering for authorized security research, CTF challenges, and malware defense.

Cedar policy expert for gating AI agent review actions (comments, merges, CI edits) behind human approval.

Expert security auditor for DevSecOps, vulnerability assessment, and compliance framework implementation.

Expert security auditor for DevSecOps, vulnerability assessment, and compliance frameworks.

Focused code reviewer for one quality dimension (security, performance, architecture, testing, accessibility) with structured findings.

Identify and prioritize security threats using STRIDE, PASTA, and attack trees before they become vulnerabilities.

27 architecture rules for Next.js 15 + Supabase: prevent auth bypasses, RLS gaps, and runtime crashes.

Secure coding, secrets management, dependency hygiene, and SSDLC practices across multiple languages.

Secure Solana wallet architecture with MEV defense, transaction safety checks, and isolated signer subprocesses.