“Security scanning”

Investigate and resolve existing Orbyn security findings, record evidence and add preventive checks without starting a security scan.

Honeypot detection & token risk scan for ERC-20s.

Security scanning and threat detection for AI agents

Scan installed plugins and skills for security risks including malicious code AND malicious natural language instructions.

Runs security audits on codebases — full scans, diff reviews, threat models, vulnerability triage, remediation guidance, and finding tracking.

Use when security verification is needed - pre-commit security checks, vulnerability scanning, STRIDE threat analysis.

Free front-end security check for any website: a grade plus the secrets and keys it exposes.

Fetch all of the repository's open GitHub security alerts (Dependabot, code scanning, secret scanning, and repository security advisories), trace each to its…

Full end-to-end PR pipeline — validate → necessity-check → lint (loop) → test (loop) → security scan → doc-check → changelog → create-pr → monitor reviews…

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis.

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state divergence.

Scan any agent skill for security risks before you install or use it.

Scan the working tree or a diff for hardcoded secrets (API keys, tokens, private keys, passwords).

Free passive security scan for AI-built apps: leaked API keys, public.env files, security headers

MCP ZAP Server

dtkmn

Safe, self-hosted ZAP operator for guided AI security scans and reports.

Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.

Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings

Scan any public GitHub MCP-server repo for security issues.

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL…

Scan an iOS/macOS Xcode project for common App Store rejection patterns before submission.

DNS lookups, health reports, SSL certs, security scans, GEO scoring, uptime checks

Scan websites for security vulnerabilities, headers, TLS, and email security.

Pre-commit verification pipeline — static security scan, baseline-aware quality gates, independent reviewer subagent, and auto-fix loop.

Scans a website to find broken links (404s, 500s).