Servers by 4hmetuyar

Scans files for leaked secrets and API keys

MCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit log

Finds lethal-trifecta toxic flows in MCP tool catalogs: untrusted input, sensitive data, egress

Scans RAG content/scraped pages for indirect prompt injection

Catches leaked credentials and PII in outbound LLM prompts

Scans MCP tool definitions for hidden instructions and confused-deputy sinks

TLS certificate/cipher/protocol inspection

Bundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligence

CVE scanning for npm/pip/cargo dependencies via OSV

DNS record enumeration, misconfiguration and dangling-subdomain detection

KVKK/GDPR-compliant LLM-to-database gateway: PII masking, RBAC, rate limiting, audit log

Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets

Triggers GuardBee scans, queries findings, AI-assisted remediation guidance

Scans MCP server auth code for OAuth 2.1 anti-patterns: token passthrough, missing audience

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks

KVKK/GDPR/CCPA compliance checks for codebases

Scans agent code for untrusted input poisoning persistent cross-session memory

Active jailbreak/extraction/obfuscation red-teaming for live LLM endpoints

Probes vector-database endpoints for unauthenticated exposure of embeddings/RAG data

Finds transitive excessive agency across LangGraph/CrewAI/AutoGen orchestration graphs