The real catalog of tools for AI agents

Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.

Scan a site or AI-built app for exposed databases, keys and MCP endpoints, then verify the fixes.

Offline methodology engine for authorized penetration testing, CTF, and security research.

Read-only network & security recon tools (DNS, TLS, headers, CORS) for AI agents, each graded.

Security tools for your AI: scan, pentest, check headers, guard code and scan repos for secrets.

MCP server exposing full recon-ng OSINT framework functionality

MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets.

Drive ASMHunter attack-surface monitoring from an AI agent: recon, scans, findings, reports.

Free, read-only security scanner for remote MCP servers, before you connect them.

Passive external attack-surface mapping: CT subdomains, DNS, TLS, HTTP posture, RDAP/WHOIS, Shodan.

Statically audits MCP tool surfaces for token cost, schema quality, and design issues.

Scan prompts for injection attacks, redact PII, and audit LLM SDK usage from any MCP client

Attack paths, scan findings and shadow AI for AI-native apps and their clouds; vet MCP servers.

Owned-target web security assessment MCP server for authenticated, high-friction apps.

Weekly scans of MCP servers for availability and consistency, with a public dashboard.

PentaTrail ASM/CTEM: attack surface discovery, asset inventory, findings by threat level

Governed external-environment scanning: signal harvest, Field Intel Reports, per-signal lineage.

Every runZero query, plus a local SQLite copy of your whole attack surface that diffs over time