The real catalog of tools for AI agents

Unified OWASP MCP Top 10 scan — path or live tools/list, A–F grade, SARIF

Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.

MCP security scanner: detect tool poisoning, prompt injection & rug-pulls - 10 OWASP heuristics.

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.

AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.

Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.

MCP server for OWASP ZAP vulnerability scanning with Docker management

Security testing MCP server for penetration testing, forensics, and vulnerability assessment

Security scanner for n8n workflows + live MCP Trust-Check. 18 rules, OWASP mapped. Paid x402 API.

Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

Code review as an MCP server — structured reviews with OWASP security scanning.

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.

Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.

Smart contract security scanner — vulnerabilities, risk scores, and calldata decoding

Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.

Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs

Free deterministic security scan of public git repos: OSV.dev vulnerable deps, secrets, config lint.