Results for “scanner”

SkillFortify

A security scanner that formally verifies AI agent "skills" (tools/plugins) across 22 frameworks for supply-chain risks before you trust them.

BullSniff

A free scanner and Chrome extension that checks an online store for signs it's an AI-generated or fraudulent storefront before you buy anything.

BugBounty Arsenal

A free, self-hostable security scanner that checks web apps, mobile apps, and smart contracts for vulnerabilities, with AI-written fix instructions.

VibeSafe

A security scanner built for people who use AI to write their code and have no idea whether it's leaking API keys or open to attack.

ForgeGuardian

A local-first security scanner that checks your project's open-source dependencies for malicious packages and known vulnerabilities without sending your code anywhere.

MCP Security Auditor

Zero-execution static scanner that audits MCP servers for command injection, path traversal and prompt injection

Husk

A local-first security scanner that checks your machine for compromised packages, leaked secrets, and risky AI/MCP configs, no cloud, no login.

AI-Infra-Guard

A free, open-source security scanner from Tencent that checks your AI infrastructure — agents, MCP servers, and frameworks — for known vulnerabilities and jailbreak weaknesses before an attacker does.

AI Compliance Advisor

An AI-powered scanner that checks your product against 125+ regulatory frameworks (EU AI Act, GDPR, SOC2, CCPA, HIPAA...) and lists the gaps to fix.

Gitleaks

A fast, open-source scanner that detects hardcoded secrets — passwords, API keys, tokens — in git history, files or CI pipelines using customizable regex rules.

DefectDojo

A security team running five different scanners (one for containers, one for code, one for dependencies...) ends up with five different spreadsheets of findings, half of them duplicates. DefectDojo pulls all of that into one place, removes the duplicates,

Vigolium

A free, open-source vulnerability scanner that combines fast, deterministic security checks with an optional AI agent that plans and triages findings on its own — built for penetration testers and security teams who want automation without losing precisio

Privado

Open-source static code scanner that finds personal data flows in Java/Python code and auto-generates GDPR/CCPA compliance reports.

AIR Blackbox

An open-source scanner that checks whether your AI agent's code actually complies with the EU AI Act, instead of guessing or hiring a consultant.

Panoptic Scans

An automated vulnerability scanner that runs OpenVAS, ZAP, Nmap and Nuclei against your network and web apps on a schedule, and reports findings in plain-language attack narratives instead of raw scanner output.

ShipSec Studio

A free, open-source, no-code tool for chaining security scanners (subdomain discovery, vulnerability scanning, secret detection) into automated workflows you run on your own servers.

KeyLeak Detector

A free scanner that catches a mistake almost every web team makes eventually: accidentally leaving a real API key or database password visible in a website's code where anyone can copy it.

mcprobe

A free command-line scanner that checks MCP servers — the plugins AI agents connect to — for hidden dangers like prompt injection or path traversal before you let an AI agent talk to them.

Bumblebee

Your laptop probably has hundreds of npm packages, PyPI libraries, VS Code extensions and MCP servers installed — Bumblebee is a free scanner from Perplexity that checks all of them at once against known supply-chain threats, without running or modifying

iFixAi

A free health check for AI agents that scans for signs an AI is lying, manipulating, or behaving unpredictably before it causes real damage to your business — like a security scanner, but for an AI's honesty and behavior instead of its code.