MCP alternatives

Free passive security scanning - check any domain's DMARC, TLS, headers, and exposures.

2

ScanLabsAI Security Scanner

by scanlabsai.com

B

Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes

3

Passiv Web Tools

by mahope

B

Free web tools for AI agents: HTML to Markdown, compliance scan, page profile, security headers.

4

Prodcheck

by FarzamHabibi

A

4,372 pre-production checks: security, performance, scale, integrations, post-launch.

5

Trent

by trent.ai

A

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

6

Pentest

by cyanheads

B

Offline methodology engine for authorized penetration testing, CTF, and security research.

7

Cybersec Toolkit

by 26zl

A

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

8

grim-mcp

by AbduljabbarBXR

C

Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.

9

Security Headers Csp Lint

by jmshinhwa

A

Reads security headers and CSP line by line in your config file and names the lines that silently do

10

Draugr

by draugr.dev

A

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

11

Moltline Code Review

by moltlinestudio.com

B

Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.

12

MCP Security & Vulnerability Auditor

by Ansarii

B

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

13

Discord Webhook Shape

by sadri-dridi

A

Check a Discord webhook URL shape. Secret discarded.

Static MCP, source-code and injection-indicator checks with redacted signed receipts.

15

ERC-8126 Scan

by cybercentry.co.uk

B

378k+ ERC-8004 agents and their security verifications. Two tools free, the rest USDC over x402.

16

Fedramp Oscal Ssp Lint

by jmshinhwa

A

16 checks on a system-security-plan JSON, in your editor, before a validator returns the package

17

Unicode Security

by mrfentmen

A

Local first MCP checks for Unicode confusables, mixed scripts, invisible controls, and...

18

Osv

by mrfentmen

A

Use this MCP server to OSV open source vulnerability data and package security checks. Tools...

19

StackShield

by stackshield.io

B

External security monitoring for Laravel apps: list domains, trigger scans, read issues and fixes.

20

AARF Utility Network

by qolapps.org

C

Paid AI utilities for web comparison, code checks, document extraction, security, and research.

21

CrowdStrike Falcon MCP Server

by CrowdStrike

A

Connects AI agents with CrowdStrike Falcon for security analysis and automation.

22

SSH Manager

by bvisible

B

SSH server management for agents, with per-server read-only and allowlist security modes

23

Reversecore MCP

by sjkim1127

B

Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.

24

Notebooklm Secure

by Pantheon-Security

A

Security-hardened NotebookLM MCP with post-quantum encryption