Security & Testing MCP Servers for Windsurf (legacy)

PEM fence shape, key discarded

PentaTrail ASM/CTEM: attack surface discovery, asset inventory, findings by threat level

Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.

Detect and redact PII and secrets before text reaches an LLM, with reversible placeholders.

CISA KEV MCP.

Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.

PreClick scans links for threats and confirms intent match with high accuracy before agents click.

Check an npm/PyPI package before an AI agent installs it: 5 focused supply-chain tools.

AI QA tester — real browsers scan sites for bugs, SEO, perf, and accessibility issues via chat.

Free enterprise-grade due diligence for your app, run by your coding agent. Then the full SDLC.

Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.

Stamp content with permanent, verifiable provenance. Hash locally, verify free forever.

Human QA on real phones and browsers for your coding agent. Pass/fail per step, with screenshots.

AI-security knowledge as MCP: standards-mapped tools (OWASP, NIST, MITRE) for AI agents.

Query CISA KEV / EPSS vulnerability feeds with full per-record provenance and auditable versions

Translation QA: automated checks, AI evaluation, linguistic review, and visual in-context testing.

AI QA that runs your app in a browser on every pull request: projects, test targets, test cases.

Post-quantum cryptographic library protecting data packets.

Security research canary remote MCP server for owned-account testing.

Attack paths, scan findings and shadow AI for AI-native apps and their clouds; vet MCP servers.

NIS2 tools: scope check, EU transposition, incident deadlines, and your own org's status (token).