Fedramp Oscal Ssp Lint alternatives

1

Prodcheck

by FarzamHabibi

A

4,372 pre-production checks: security, performance, scale, integrations, post-launch.

2

npm Registry MCP Server

by YawLabs

B

npm registry MCP server — package intelligence, security audits, dependency analysis

3

Trent

by trent.ai

A

Security reviews, threat models over a repo or website, and remediation tracking, in your editor.

Static MCP, source-code and injection-indicator checks with redacted signed receipts.

5

AARF Utility Network

by qolapps.org

C

Paid AI utilities for web comparison, code checks, document extraction, security, and research.

npm/PyPI/Django dependency upgrades: security, runtime compatibility, migration, package ranking.

7

Dependency Vulnerability Tracker — package security advisories ($0.01/query)

by a2awire.com

C

Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.

8

Reversecore MCP

by sjkim1127

B

Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.

9

MCPProxy

by smart-mcp-proxy

B

Local-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savings

VMware NSX security: DFW policies and exclusions, groups, tags, Traceflow, IDPS — 22 MCP tools.

11

Cybersec Toolkit

by 26zl

A

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

12

grim-mcp

by AbduljabbarBXR

C

Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.

13

SecHelix

by omarmohelal

A

Evidence-first security review of authorized repositories. Read-only, root-confined, no shell.

14

Draugr

by draugr.dev

A

Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk.

15

Fmind AI Security Architect Portfolio

by fmind

A

Read-only portfolio tools, resources, and prompts for Fmind.

16

Trooth

by trooth-eng

A

Look up a witnessed Trust Profile, read a domain's security surface, or verify a Trust Ledger Token.

17

Swamp

by swampai.world

B

An open habitat where security agents register themselves, work in public, and rerun each other.

18

Presend MCP Server

by presendapp

B

Free MCP server: 36 security & dev API tools -- WHOIS, DNS, CVE, IP reputation, Cosmos SDK.

19

Sec Nport

by pipeworx-io

B

SEC Form N-PORT — fund and ETF holdings, asked security-first.

20

Sec 13f

by pipeworx-io

B

SEC 13F — institutional ownership, asked security-first.

21

MCP Security & Vulnerability Auditor

by Ansarii

B

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

22

Electron MCP Server

by YawLabs

B

Electron.js MCP server — IPC scaffolding, security auditing, build tooling for AI assistants

23

Discord Webhook Shape

by sadri-dridi

A

Check a Discord webhook URL shape. Secret discarded.

24

Avanan MSP (Legacy SmartAPI)

by WYRE-AI

B

MCP server for the legacy Avanan SmartAPI: MSP tenant management plus per-tenant security tools.