The real catalog of tools for AI agents

Audit GitHub Actions workflows for script injection, unpinned actions and missing permissions.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

AI code security audits via x402 USDC: $0.01 scans, $0.50 audits, $5 auto-fixes. SAST/SCA.

Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.

Free payment guide and Base-USDC x402 MCP security, package, domain, and SEC tools.

MCP server for Google Workspace security auditing — login audit, external sharing, daily brief

Security tools for AI agents: scan MCP servers, validate HDP delegation chains, audit releases.

GitHub Actions workflow security audit - 21 checks: pinning, permissions, secrets, injection.

kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Scan websites for security vulnerabilities, headers, TLS, and email security.

AI website growth audits: SEO, performance, AI readiness (GEO), conversion, a11y, security.

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Audit GitHub repos for malicious and supply-chain code before you depend on them.

DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring

EVM audit (Slither + source + security.txt + MCP-probe + wallet-exposure). 6 tools + /trace.

Security-first SendGrid MCP server: dry-run default, recipient allowlists, rate caps, audit log.

AWS security scanner with attack chain detection, IAM privilege escalation, and fixes