The real catalog of tools for AI agents

Free hosted CVE intel for bug-bounty agents: CVE fact-check, attack approaches from paid H1 reports

Local vulnerability scan on top of grype, with prioritised upgrade actions for agents.

Supply-chain guard for AI coding agents: verify packages, check vulns/malware, detect typosquats.

EU AI Act Article 5(1)(f) gambling-vertical compliance audit MCP. Detects AI systems that exploit ps

CVE lookup via NIST NVD, CISA KEV, EPSS, and MITRE ATT&CK. 7 tools.

Tells your AI agent which vulnerabilities to fix first, using OSV.dev, FIRST EPSS, and CISA KEV.

Known vulnerabilities and fixed versions for npm, PyPI, Go, Maven packages from OSV.dev via Apify.

Verify a vuln report's file/line/function claims against a real GitHub repo.

Agent rental platform: web-vuln scanning, OSINT and red-team tools via subscription.

CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.

Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.

Verify a vuln report's file/line/function claims against a real GitHub repo.

Dev-registry data: npm/PyPI/Docker/VS Code packages, dep graphs, vulns, 50+ ecosystems.

Discover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface

Improve security writing, score it against rubrics, plan IR, CTI, vuln, and product strategy.

Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.

Explain any lockfile or workflow-pin change: bumps, vulns, ages, deprecations — 61 formats

Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

Every Cork API operation, plus cross-client risk attribution and exploitability-first vuln triage.

npm, PyPI & crates.io health, vulns and dependency graphs. Runs locally, no API key.