Security MCP servers

Two-key JSON seal/open. Cloak needs a live license. Open is keys-only.

MCP gateway for controlled SSH access with per-client auth, command policies, and audit logging.

Deterministic pre-execution filter that blocks known scope-creep and prompt-injection tool calls

Local read-only cyber evidence integrity checks and aggregate comparison (alpha).

Check text for leaked credentials before an agent writes or commits it. Runs locally.

Read-only checks that fail a guardrail which is present but has stopped refusing anything

Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs

Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.

Route MCP capabilities through deterministic identity, policy, budget, and deadline constraints.

Administer wg-easy (WireGuard Easy) v15: manage VPN clients, configs, QR codes and server status

CVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.

Check tokens, pages and x402 payments before your agent trusts them. Offline verdicts.

Explain fraud verdicts with evidence, surface account rings, and see who has burned other operators.

Tamper-evident records of AI agent decisions. Verify offline, or publish a proof link.

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

Read-only OctoWatch DLP Cloud MCP: risks, idle time, productivity, monitoring.

AWS Payment Cryptography via MCP — keys, PIN/MAC/CVV/ARQC, PCI guards, HSM migration analysis.

MCP security scanner: detect tool poisoning, prompt injection & rug-pulls - 10 OWASP heuristics.

Control plane MCP that dedups scanner output, rate-limits hosts, and runs non-destructive proofs.

HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.

Look up what your verification method cannot see: 48 failures that report success.

Gating proxy for MCP servers: policy, verification and one audit trail across upstreams.

Kill switch + spend guard for AI agents that spend money, across every wallet vendor at once.

Evidence-backed AppSec for AI applications and agents. Powered by HAIEC.

Cryptographically verifiable receipts of an agent's delegated work, verified offline.

Sealgate gateway proxy: list governed MCP servers and review agent session and audit status.

Manage Zscaler Zero Trust Exchange via 400+ tools — ZPA, ZIA, ZDX, ZCC, ZTW, ZMS, EASM, and more.

Discover mobile app attack surfaces via BeVigil OSINT — hosts, subdomains, URLs, and more.