security MCP Server
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.
Discovered via github-topic:mcp and last synced 2mo ago.
Install instructions not detected yet
Check the source repository for the latest setup steps.
Tools
Cloud security audits — 60+ checks across AWS, Azure, GCP
OWASP Top 10, WSTG methodology, API security, session testing
CVE intelligence — NVD, EPSS, CISA KEV, GitHub Advisory, OSV
Models
GitHub security posture — repo, org, actions, secrets, supply chain
What It Does
Domain
Tools
What It Tests
OSINT recon — Shodan, VirusTotal, SecurityTrails, Censys, DNS, WHOIS
Android/iOS, Frida/Objection, MASTG/MASVS compliance
Focus
Active Directory, Kerberos attacks, lateral movement, pivoting
AWS, Azure, GCP — IAM misconfigs, CIS benchmarks, exposed resources
Full-access primary agent — reconnaissance, exploitation, reporting
JWT attacks, SSRF, SSTI, race conditions, request smuggling, cache poisoning, CORS, GraphQL, prototype pollution, XXE, WebSocket, subdomain takeover, host header injection, open redirect
Capabilities
AWS, Azure, Kubernetes, Windows, macOS privilege escalation and persistence
CIS Benchmarks (AWS/Azure/GCP/K8s), NIST Framework, MITRE ATT&CK (Enterprise, Mobile, ICS)
真实性验证技能。分析用户提供的信息、消息、图片或内容，判断其真实性和可信度，识别虚假信息、AI生成内容或伪造内容。
Implementing AWS Security Hub to aggregate security findings across AWS accounts, enable compliance standards like CIS AWS Foundations and PCI DSS, configure automated remediation with EventBridge and Lambda, and create custom security insights for organizational risk management.
Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.
Reduce container attack surface by building application images on Google distroless base images that contain only the application runtime with no shell, package manager, or unnecessary OS utilities.
ToolJet is the open-source foundation of ToolJet AI - the enterprise app generation platform for building internal tools, dashboard, business applications, workflows and AI agents 🚀
Secure, Fast, and Extensible Sandbox runtime for AI agents.
Flexible and powerful framework for managing multiple AI agents and handling complex conversations
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
Learn how to use the absolute-audit Claude skill. Complete guide with installation instructions and examples.
Learn how to use the token-scam-analysis Claude skill. Complete guide with installation instructions and examples.
Learn how to use the absolute-upgrade Claude skill. Complete guide with installation instructions and examples.