Best 660 Security Tools in 2026

MCP-Scan is a security scanning tool for MCP servers, used to detect common security vulnerabilities such as prompt injection, tool poisoning, and cross-domain escalation.

MCP - Shield is a security tool for scanning MCP server vulnerabilities, which can detect security risks such as tool poisoning attacks, data leakage channels, and cross - domain violations.

Agentic Radar is a security scanning tool for analyzing and assessing agentic systems, helping developers, researchers, and security experts understand the workflows of agentic systems and identify potential vulnerabilities.

Aderyn is an open - source Solidity smart contract static analysis tool written in Rust, which helps developers and security researchers discover vulnerabilities in Solidity code. It supports Foundry and Hardhat projects, can generate reports in multiple formats, and provides a VSCode extension.

IDA Pro MCP is a server plugin for reverse engineering. It interacts with client tools through the MCP protocol, providing functions such as function analysis, comment modification, variable renaming, etc., and supports multiple MCP clients such as Cline, Roo Code, etc.

Security Detections MCP is a server based on the Model Context Protocol that allows LLMs to query a unified security detection rule database covering Sigma, Splunk ESCU, Elastic, and KQL formats. The latest version 3.0 is upgraded to an autonomous detection engineering platform that can automatically extract TTPs from threat intelligence, analyze coverage gaps, generate SIEM-native format detection rules, run tests, and verify. The project includes over 71 tools, 11 pre-built workflow prompts, and a knowledge graph system, supporting multiple SIEM platforms.

An MCP server based on Express.js, providing encryption tools including key pair generation, shared key derivation, and message encryption/decryption functions, and supporting SSE real-time communication.

BloodHound - MCP is a project that integrates the Model Context Protocol (MCP) server with BloodHound, analyzing Active Directory security data through natural language.

BloodHound - MCP is a tool that integrates the Model Context Protocol (MCP) server with BloodHound. It analyzes Active Directory attack paths through natural language and provides more than 75 dedicated tools for AD security assessment.

JADX is a powerful decompilation tool for Android Dex and Apk files. It supports converting Dalvik bytecode into Java source code, decoding resource files, and restoring code obfuscation. It provides two operation modes: command-line and graphical interface, and is suitable for developers and security researchers.

An MCP server set in the Kali Linux environment, focusing on reverse engineering, security testing, and automated workflows.

Pipelock is an open-source AI agent firewall that provides security protection with zero runtime dependencies through a single binary file. It adopts an architecture with separated capabilities and deploys a nine-layer scanning pipeline between the agent and the Internet to prevent secret leakage, prompt injection, and malicious tool calls. It supports multiple proxy modes (Fetch proxy, forward proxy, WebSocket proxy) and MCP proxy, and provides functions such as an emergency stop switch, audit logs, and SIEM integration.

Parse DMARC is an open-source tool for monitoring and analyzing DMARC reports. It automatically retrieves email reports via IMAP and provides a visual dashboard to help users protect their domains from email spoofing and phishing attacks.

Cycode CLI is a locally installed application used to scan code repositories for security vulnerabilities, including sensitive information leakage, Infrastructure as Code misconfigurations, Software Composition Analysis vulnerabilities, and Static Application Security Testing issues. This tool supports multiple scan types, such as repository scanning, path scanning, and commit history scanning, and provides an ignore rule function to exclude specific results.

A secure command-line MCP server for Windows systems, supporting multi-shell and SSH remote management

ToolHive is a lightweight tool designed to simplify the deployment and management of MCP servers, providing ease of use, consistency, and security.

The Semgrep MCP Server is a server based on the Model Context Protocol (MCP) for scanning code for security vulnerabilities through Semgrep, supporting multiple integration methods and tools.

GhidrAssistMCP is a powerful Ghidra extension that enables AI assistants and other tools to interact with Ghidra's reverse engineering capabilities through a standardized API by implementing a Model Context Protocol (MCP) server.

IDA Pro MCP Server is a plugin that enables remote interaction between AI assistants and IDA Pro through the Model Context Protocol interface, supporting binary analysis tasks such as disassembly, pseudocode retrieval, and function query.

The Maigret MCP Server is an MCP protocol server that provides services for the OSINT tool maigret. It supports searching for usernames across social networks and analyzing URLs and can be integrated into applications such as Claude Desktop.

An automated suite for Android APK security analysis that integrates tools such as JEB, JADX, APKTOOL, FlowDroid, and MobSF, and provides a unified API interface through the MCP protocol to achieve vulnerability detection with multi - tool cross - validation.

The MCP Gateway is an advanced AI infrastructure middleware solution that acts as a proxy gateway for model context protocol (MCP) servers, providing unified interfaces, sensitive information filtering, and lifecycle management functions.

Awesome MCP Security is a collection of resources related to the security of the Model Context Protocol (MCP), including security considerations, papers, videos, articles, tools, and servers, aiming to help users understand and address MCP - related security challenges.

The Maigret MCP Server is a model context protocol server for the OSINT tool maigret, supporting username search and URL analysis functions.

WireMCP is an MCP server that provides real-time network traffic analysis capabilities for large language models (LLMs). It realizes data capture, threat detection, and network diagnosis by integrating the Wireshark tool.

This project is a collection of MCP servers designed for Kali Linux, aiming to enhance reverse engineering, security testing, and automation workflows. It integrates tools such as Nmap and Wireshark and provides Docker sandbox support.

An example of MCP client and server using didwba as authentication technology

The Infisical Model Context Protocol (MCP) is a service protocol that integrates with the Infisical API through function calls. It supports multiple tool operations such as creating, deleting, and updating keys, and provides a debugging tool called MCP Inspector.

The Korx Share MCP Server is a multi-functional MCP protocol server that, by integrating with the korx.org API, creates secure and shareable URLs for AI-generated visual content (such as charts, dashboards, and HTML pages), while maintaining content interactivity and performing risk filtering.