Inside-the-app security middleware for Node.js. Express and NestJS run the full sanitizer pipeline (XSS, SQL, NoSQL, SSTI, XXE, path, command, prompt injection, prototype pollution, LDAP, XPath, header injection, plus 20+ more attack types). Fastify, Koa,

Security scanner for VS Code AND a standalone `caspian` CLI you can run anywhere (PowerShell/cmd/bash, no VS Code needed) — 295+ rules covering code and infrastructure (Dockerfile, Terraform, Kubernetes), intra-file taint tracking, SSRF/XXE/SSTI/deseriali

ShieldNet Security Scanner — MCP Server for AI Agent Security Governance. Scans URLs for XSS, SQLi, SSTI, CORS misconfig, missing headers, info disclosure, and more. Returns ALLOW/WARN/BLOCK governance decisions.

OMEGA MASTER v10.0 — Ultimate Autonomous Pentest Engine by @c4ccz. 8 Collaborative AI Agents, 5000+ Paths, 3000+ Payloads, Deep Correlation, Attack Chains, Browser Automation.

AI security scanner for vibe-coded apps. Find vulnerabilities before attackers do.

SST-I is a powerful Server Side Template injection vulnerability scanner that helps you quickly identify and mitigate potential security risks in your web applications.

Claude Code MCP tool for autonomous security testing (Agentic Hacking)

Black-box & white-box security auditor for web applications with HackTricks techniques

逐码 CLI — 命令行代码安全审计工具 (SAST + SCA)

Run security scans across web, AI, cloud, CI/CD, mobile, and network surfaces from your terminal

Stable app-native WAF for Node.js with route-aware protection, distributed controls, runtime safety, production diagnostics, and a frozen v1 contract.

Multi-agent red teaming system for Pi - 10 specialized security agents for vulnerability assessment and penetration testing

企业级全栈安全审计 MCP Server — 内置 OWASP Top 10 + CWE Top 25 检测引擎，覆盖注入/访问控制/加密/配置/敏感信息/供应链安全

Exhaustive web crawler, accessibility auditor & load tester for localhost SPAs