Servers by 4hmetuyar

Scans files for leaked secrets and API keys

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress

Scans RAG content/scraped pages for indirect prompt injection

Catches leaked credentials and PII in outbound LLM prompts

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

TLS certificate/cipher/protocol inspection

Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence

CVE scanning for npm/pip/cargo dependencies via OSV

DNS record enumeration, misconfiguration and dangling-subdomain detection

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks

KVKK/GDPR/CCPA compliance checks for codebases

Scans agent code for untrusted input poisoning persistent cross-session memory

Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints

Probes vector-database endpoints for unauthenticated exposure of embeddings/RAG data

Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs

Scans LLM/agent code for Unbounded Consumption / denial-of-wallet risks (OWASP LLM Top 10 2026 #6)

MCP elicitation anti-patterns: secrets in forms, third-party authorize URLs, credentials in URLs