Dockerfile Security Auditor

Audit Kubernetes workloads for privileged containers, root execution, writable filesystems, missing capability drops, host access and mutable images.

Dockerfile Security & Quality Audit

unbearable_dev/dockerfile-audit

Hadolint-grade Dockerfile audit, MCP-native. 18+ checks across 5 categories (base image, instructions, security, efficiency, secrets) with severity, line numbers, remediation, and fix snippets. Pay-per-event. Call from Claude Desktop, Cursor, n8n, or any MCP client. Built by Unbearable Labs.

Dockerfile Linter — Security & best-practices checker

perryay/dockerfile-linter-checker

Lint Dockerfiles and docker-compose files against 15+ security and best-practice rules. Detects running as root, missing USER directive, unpinned packages, missing HEALTHCHECK, and more. Supports strict mode and batch linting.

Security Headers Auditor

junipr/security-headers-auditor

Audit website security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.

security.txt Auditor

junipr/security-txt-auditor

Audit security.txt auditor inputs and return structured findings, evidence rows, and a buyer-ready report for SEO, developer, and operations teams.

Inspect public MCP/server GitHub repos for manifest/readme/package safety signals: tool scope, auth, secrets, shell/file/network language, and maintenance metadata.

Directory Listing Quality Auditor

seeb/directory-listing-quality-auditor

Audit public directory listing pages for missing business details, weak descriptions, and local SEO quality signals.

claudemd-security-auditor is an Apify Actor that scans any AI agent project's CLAUDE.md, .claude/hooks, and settings for hardcoded secrets, prompt-injection vectors, destructive commands, and exfiltration channels, returning a severity-ranked JSON + Markdown audit.

CSP Analyzer 🛡️

perryay/csp-analyzer

Analyze Content-Security-Policy headers for URLs. Separates enforced vs report-only policies, detects weak configs, bypass patterns, missing protections. Premium: weak CSP alerts.

Website Security & Vulnerability Audit

smart-digital/website-security-vulnerability-audit

Automated security and vulnerability audit for websites. Detects WordPress plugin vulnerabilities, checks for updates, analyzes SSL/TLS, security headers, and CMS security