Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.

Health checks for government APIs — Congress.gov, FEC, CISA KEV, NVD, GDELT, and more. CLI + TypeScript library.

Dependency vulnerability scanner that ranks by real exploitability — reachability analysis, CISA KEV, EPSS, and CI gating for npm and PyPI projects

Scanner engine for the agentic-security Claude Code plugin — SAST, SCA (function-level reachability + CISA KEV), secrets, IaC, prompt-injection, MCP/agent-tool audit, auth/authZ deep analysis, attack chains, PoC generation, business logic, toxic-combinati

endoflife.ai MCP server — software lifecycle intelligence for AI agents (EOL dates, EOL Risk Score, CISA KEV exposure, EOS edge devices, SBOM checks). npx endoflife-mcp runs a stdio bridge to https://mcp.endoflife.ai.

API deploy gate. Blocks a deployment only on proven exploitation, with EPSS and CISA KEV prioritisation and published precision numbers.

A fast, keyboard-first investigation workspace for SOC analysts. Enriches IPs / domains / URLs / hashes with VirusTotal, AbuseIPDB, IPQS, Shodan, GreyNoise, URLhaus, ThreatFox, MalwareBazaar, OTX, Sucuri, urlscan.io, GeoIP, DNS, WHOIS — plus CISA KEV cros

Vör's Watch — lightweight, dependency-free VPS anomaly detection: file integrity, port/process baselining, outbound IP reputation, package vulnerability scanning, CISA KEV cross-reference, trusted-CIDR noise filtering, known-bot annotation, rootkit detect

Cyber Resilience Act helper: generate a CycloneDX SBOM from your lockfiles, check OSV.dev for known vulnerabilities and CISA KEV for actively exploited ones, and print your CRA Article 14 reporting hints.

EchelonGraph CVE & internet-exposure intelligence as an MCP server — real-time CVEs, EchelonGraph multi-source scores, CISA-KEV/EPSS, and the unique LIVE internet-exposure footprint per CVE — for Claude, Cursor, and any MCP client.

CISA Known Exploited Vulnerabilities catalog ingestion for AbsoluteJS.

CISA Known Exploited Vulnerabilities catalog

Scan ALL Maven, Gradle, npm, Yarn, Composer, Python, C#/.NET, Go & Ruby dependencies — plus embedded JARs (fat-jars/war/ear) — in a source tree ONE SHOT without mvn/python/etc — CVE (EPSS/KEV-prioritised), EOL, obsolete, outdated & licenses, with SBOM/CSA

Compile CVE intelligence into evidence-backed security skill updates

A provenance-first OSINT/security intelligence feed CLI. Every item ships a real source URL, a real timestamp, and an explicit live/fallback flag -- never a fabricated or silently-replayed data point.

Dependency install safety gate with OSV-backed advisory checks, approved-spec ledger enforcement, and reorg rollback hooks

DugganUSA CLI — threat intel scanner (dugganusa-cli) + local STDIO MCP server (dugganusa-mcp). 1.5M+ IOCs, read-only, customer owns the binary.

Sticky notes for your desktop that render LaTeX and Markdown.

CVE/vulnerability intelligence MCP server — 41 tools, 11 sources: NVD, EPSS, KEV, GHSA, OSV, Shodan, VulnCheck, Vulners, Nuclei, Metasploit, CIRCL, ATT&CK

Key-Value API with pluggable backends. So simple, even Kevin Malone could use it.