Static analysis scanner for MCP server code and multi-tenant SaaS applications. 57 deterministic rules covering tenant isolation, tool visibility, cache key scoping, RLS, IDOR, and credential vault isolation. MCP server for AI agent integration.

Security infrastructure your AI can't be — deterministic, current past your model's training cutoff, whole-repo-aware, author-independent. Security MCP for vibe coding. 634 rules, 39 tools, CLI + doctor. Prompt-level shift-left security (secure_prompt — e

Rigour's MCP server: lets coding agents review their change, check for an existing helper before writing a new one, and recall the team's lessons. Works with Claude Code, Cursor and other MCP clients.

Open-source adversary emulation for AI agents and MCP servers.

Free MCP security scan: tool-poisoning & prompt-injection audit (OWASP LLM01/08) + trust badge

Health check for React Native and Expo apps: upgrade blockers, App Store and Google Play rejections, crash risks, security (OWASP MASVS), accessibility and performance, with a step-by-step upgrade plan.

Exposes agent-facing tools that let a personal AI agent submit each proposed action for an allow, require_approval, or deny verdict against OWASP PAA10 policy rules, plus tools to record provenance-tagged memories, log refusals, read status, and trigger a self-stop. Its decisions are advisory unless paired with the project's gating proxy or hook, which enforce them.