# Security Detection

sec-mcp is a Python security detection toolkit that provides security check functions for domains, URLs, IPs, etc. It supports integration with Python applications, use in the terminal CLI, or running as an MCP server to provide real-time threat insights for LLMs.

A Ruby-based AI pair programming MCP server that provides AI-assisted programming functions such as code review, brainstorming, performance analysis, and security check through OpenRouter.

CKB is a tool that transforms a codebase into a queryable knowledge base. It helps developers understand code, analyze impacts, find owners, and detect dead code via CLI, API, or AI assistants, improving development efficiency and security.

Security Detections MCP is a server based on the Model Context Protocol that allows LLMs to query a unified security detection rule database covering Sigma, Splunk ESCU, Elastic, and KQL formats. The latest version 3.0 is upgraded to an autonomous detection engineering platform that can automatically extract TTPs from threat intelligence, analyze coverage gaps, generate SIEM-native format detection rules, run tests, and verify. The project includes over 71 tools, 11 pre-built workflow prompts, and a knowledge graph system, supporting multiple SIEM platforms.

The Lighthouse MCP Server is a Model Context Protocol server based on Google Lighthouse, providing comprehensive website performance auditing and analysis functions, including performance scoring, accessibility checks, SEO analysis, and security assessment.

GhidraMCP is a Ghidra plugin that enables AI - assisted binary analysis through the Model Context Protocol (MCP), connecting reverse engineering with AI assistants and providing functions such as natural language interaction, in - depth code analysis, and security vulnerability detection.

This is an MCP server implementation based on the IP2Location.io API, capable of querying detailed geographical location information of IPv4 or IPv6 addresses, including country, region, city, latitude, and longitude, and supporting the acquisition of network and security-related data.

SharkMCP is a network packet capture and analysis MCP server based on Wireshark/tshark, providing AI assistants with the ability to conduct network security analysis, troubleshooting, and packet inspection. It supports asynchronous packet capture, PCAP file analysis, SSL/TLS decryption, and other functions.

Aderyn is an open - source Solidity smart contract static analysis tool written in Rust, which helps developers and security researchers discover vulnerabilities in Solidity code. It supports Foundry and Hardhat projects, can generate reports in multiple formats, and provides a VSCode extension.

Lanalyzer is an advanced Python static taint analysis tool used to detect potential security vulnerabilities in Python projects.

CodeSentinel is a code quality analysis server based on the Model Context Protocol (MCP), specifically designed to detect 93 hidden problem patterns in AI-generated code, including security vulnerabilities, deceptive error handling, placeholder code, etc. It uses pattern matching rather than AST analysis to find code that is syntactically correct but semantically problematic.

The GitHub MCP server provides AI-assisted tools such as code review, PR analysis, and security detection, and supports local and Docker deployment.