IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a command-line utility and MCP server for use within AI coding assistants for quickly building IAM policies.

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

Wassette: A security-oriented runtime that runs WebAssembly Components via MCP

All-in-One malware analysis tool.

Rust MCP server and CLI for Tailscale devices, users, keys, policies, and auth.

AI agent security scanner and npm audit for MCP servers, Claude Code, Cursor, and Windsurf. Find prompt injection, hallucinated packages, secrets, unsafe tools, and vulnerable code.

Official SonarQube MCP Server for code quality and security in AI agents

Score agent manifests, generate CI workflows, and pull Clarx scan findings into your IDE.