Security & Testing MCP Servers for Microsoft Copilot

BC/DR & compliance tools: DORA, NIS2, NIST CSF, GDPR, SOC 2, CMMC, CAF, ISO 27001, FCA/PRA.

List, schedule, and retrieve evidence for ControlDrill incident-response tabletop exercises.

Add a cookie consent banner that blocks trackers before consent and records proof of consent.

Enrich, search, assess, and manage threat intelligence through 80+ typed MCP tools.

crt.sh — Certificate Transparency log search

CSP-Report-Only directive count, value discarded

CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.

CycloneDX component count, body discarded

Blockchain SSN for AI agents. MCP gateway that blocks at the point of action, tamper evident audit.

Who to notify after a data breach and by what date: all US states, SEC, HIPAA, GDPR, UK. Sourced.

Live trust signals for domains & packages: age, registrar, typosquat resemblance.

Daily data feeds MCP: CISA KEV+EPSS, SEC Form 4, 10-K sections, domain ranks. Keys $19/mo.

Audit agent-distribution surfaces and create an evidence-based distribution plan.

Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.

Deterministic pre-execution audit for trading agents. PASS/WAIT/FAIL, reproducible verdict_hash.

DNS & email security scanner — 51 tools for SPF, DMARC, DKIM, DNSSEC, SSL, and more.

Security audit for docker-compose.yml — 25 checks: secrets, privileges, network, volumes, images.

Hadolint-grade Dockerfile audit — 19 checks: secrets, privileges, supply chain, hygiene.

Audit Dockerfiles for root users, baked-in secrets, curl-pipe-shell and unpinned base images.

WHOIS, DNS, SSL, IP geo for security forensics and OSINT — separate from SEO.

Remote MCP server: 19 domain-hygiene and email-auth tools (DNS, SPF, DMARC, DKIM, TLS).