Reads your SECURITY.md against the EU Cyber Resilience Act reporting clock that started on 11 Septem
41 MCP servers
Names every image, font, badge and embed in your docs that sends an EU reader's IP outside the EEA
Finds the 12 settings that break when public TLS certificates fall to 100 days on 2027-03-15: openss
Reads security headers and CSP line by line in your config file and names the lines that silently do
Ten checks on the export paragraph of a repository that ships encryption
Audits firestore.rules and storage.rules for public access, expired test-mode dates and missing owne
26 rules and 32 safe-replacement snippets for hardcoded connection strings, keys and kubeconfigs acr
Dates every quantum-vulnerable algorithm in your code against the NIST IR 8547 clock: deprecated aft
PCI DSS 4.0.1 requirements 6.4.3 and 11.6.1 have been mandatory since 2025-03-31, and the PCI SSC re
Checks PrivacyInfo.xcprivacy and your C#, Dart, JS, Swift and Kotlin source for Apple required-reaso
15 rules that find the real customer data your .snap files committed
Marks every line of a Livewire or Blade file that the visitor's browser can call, rewrite or read
Marks the lines in your test suite that current pytest no longer runs — and the config keys it silen
15 rules that find every line in a Rails .erb view where output escaping was switched off or was the
Finds the AI call sites, generation code and system prompts that trigger EU AI Act Article 50 disclo
Reads the open-weight model IDs in your code and names the licence clause that binds you - 22 rules
Finds the build-config lines that ship an ESP-IDF or Zephyr device with secure boot off, a debug por
Finds the lit-html binding positions auto-escaping does not cover, before the component ships
13 rules that decide whether a vulnerability report ever reaches you
14 rules, four CISA attestation sections, one workflow file
Flags the lines in your repo that break the EU Cyber Resilience Act - default passwords, disabled TL