MCP Security & Vulnerability Auditor (2026)

MCP Server Risk Auditor

trovevault/mcp-server-risk-auditor

Audits MCP server manifests for tool, permission, credential, prompt-injection, exfiltration, and execution risks. Export data, run via API, schedule and monitor runs, or integrate with other tools.

Website Tech Stack Change Detector

zinin/tech-stack-change-detector

Compare public submitted-page HTML and response-header signatures with a technology baseline you supply. Returns candidate additions, technologies not observed now, evidence provenance, confidence, gaps, stable IDs, and a conservative verification action for up to 100 websites.

theHarvester Domain OSINT Collector

automation-lab/theharvester-domain-osint-collector

Collect source-attributed public certificate hostnames, resolved IPs, DNS aliases, and related URL candidates for recurring domain reconnaissance.

DMARC Report Analyzer — Email Security & SPF/DKIM

perryay/dmarc-report-analyzer

Parse and analyze DMARC forensic and aggregate reports. Get SPF/DKIM alignment, identify spoofing attempts, and monitor email authentication health.

Solana Anchor Audit Scanner — First-Pass Review & Audit Verify

halobartku/sol-audit

Static security audit for Solana/Anchor Rust repos. Repo URL in, structured findings out: severity, CWE, file:line, evidence, fix. 16 Solana rule families, deterministic, ~6s/repo. Triage or audit-report verification. Honest: 0/11 recall on labelled corpus — cross-check, not human-audit replacement.

EPSS Exploit Prediction Scraper

parseforge/epss-exploit-prediction-scraper

Scrapes EPSS exploit prediction scores from the FIRST public data service. Returns CVE ID, EPSS score, percentile, and date for single CVEs, lists, or the full daily corpus with optional history and flattened output.

Audit a public website's security.txt vulnerability disclosure metadata. Checks discovery paths, required fields, expiration, contact methods, and returns a readiness score with recommendations.

CISA ICS Advisory Change Monitor - New & Updated Only

rtworule/cisa-ics-advisory-delta-monitor

Monitor official CISA ICS advisories and emit only new, updated, or removed CSAF records for OT security, vulnerability management, and compliance workflows.

🛡️ CISA KEV Deadline & EPSS Vulnerability Radar

snuggly_beanie_970/cisa-kev-remediation-radar

🛡️ Prioritize actively exploited vulnerabilities using CISA KEV deadlines plus FIRST EPSS probability. 🚨 Flag overdue fixes, ransomware use and high-risk CVEs. ✅ Schedule-ready, deduplicated security alerts with official sources.

GitHub Repo Search — Stars, Language & Topics

ryanclinton/github-repo-search

Search and scrape GitHub repositories by keyword, language, stars, forks, or topic. Extract structured repo metadata including owner, license, topics, and activity timestamps. Sort by stars, forks, or recently updated. Export to JSON, CSV, or API. No token required.

Google News Scraper & Alerts - Brand Monitoring API

groupoject/google-news-scraper

Scrape and monitor Google News by keyword for brand alerts, competitor tracking, PR monitoring, market research, headlines, publisher domains, dates, snippets, and article links. No API key required.