hexis-mcp-guard is an open-source command-line tool that scans Model Context Protocol (MCP) servers for security vulnerabilities. Below are 19 security & compliance platforms apps with similar functionality to hexis-mcp-guard, matched by what each product actually does — not ranked or scored. Explore each to find the closest fit for your use case.
guardmcp is an open-source CLI tool that scans MCP server configurations for security issues, including secrets, injection vulnerabilities, and authentication problems. It maps findings to the OWASP MCP Top 10, helping security engineers and DevOps teams secure their deployments.
mcp-check-security is an open-source command-line tool that performs offline security checks on Model Context Protocol (MCP) server configurations. It helps developers and security engineers identify potential vulnerabilities and misconfigurations before deployment. The tool is designed for use in AI infrastructure environments.
mcp-security-scan is an open-source CLI tool that scans MCP servers for hardcoded secrets, unsafe execution, and missing authentication. It helps developers and security engineers identify and remediate vulnerabilities in their MCP infrastructure.
mcp-mcts is an open-source CLI tool for local MCP security scanning, attack chain analysis, inventory management, and CI integration. It supports optional Semgrep and LLM analysis, making it suitable for security engineers and DevOps teams focused on codebase security.
mcp-toolguard is an open-source CLI tool for contract testing, drift detection, and security checks on MCP servers. It integrates with CI pipelines and production environments to help DevOps engineers maintain server integrity.
ShieldMCP is a web-based security scanner that analyzes Model Context Protocol (MCP) configuration files for vulnerabilities, including permission risks, exposed secrets, and supply chain threats. It provides instant feedback and actionable fixes, helping MCP administrators secure their deployments efficiently.
mcp-bandit is an open-source command-line tool for scanning Model Context Protocol (MCP) servers for security vulnerabilities, including prompt injection and SSRF. It is designed for security engineers to audit and analyze MCP deployments.
Security scanner for MCP servers — detect prompt injection, credential leaks, exposed endpoints, and tool poisoning
Security scanner for MCP (Model Context Protocol) servers - pentest your AI agent's tool connections
mcp-strike is an open-source command-line tool designed for active, runtime adversarial testing of Model Context Protocol (MCP) servers. It helps security engineers and red teams identify vulnerabilities and weaknesses by simulating attacks and scanning for issues. The tool supports automated security assessments and is freely available under the MIT license.
mcp-secrets-guard is an open-source CLI tool that scans projects for AI and MCP-related secrets to prevent leaks. It is designed for developers and security teams to audit codebases before deployment.
mcpsnare is an open-source CLI tool that actively scans Model Context Protocol (MCP) servers for vulnerabilities using confirmation-driven techniques. It is designed for security professionals to automate security assessments and penetration testing of MCP endpoints.
phi-guard-mcp is an open-source CLI tool and MCP server designed to detect, redact, and audit protected health information (PHI) in medical text before it is sent to AI agents. It helps healthcare developers and privacy engineers ensure HIPAA compliance and data privacy when integrating AI into medical workflows.
server-guardian-mcp is a proprietary MCP server that enables monitoring and management of remote Linux servers via SSH. It offers over 60 tools including health checks, anomaly detection, dashboards, compliance reporting, and integrations with incident management platforms, targeting DevOps teams and IT administrators.
mcp-fence is an open-source CLI tool for security scanning, protocol inspection, dynamic fuzzing, and sandboxed testing of Model Context Protocol (MCP) servers. It helps AI infrastructure engineers identify vulnerabilities and generate security reports.
mcp-checkup is an open-source CLI utility that audits MCP server setups, measuring context tax and hygiene. It helps AI infrastructure engineers and developers ensure their Model Context Protocol servers are efficient and healthy by providing detailed health checks and token analysis.
dfx-mcp-scanner is an open-source CLI tool for scanning Model Context Protocol (MCP) servers to detect malicious tools, data exfiltration, and supply chain risks. It is designed for security engineers managing AI agent infrastructure.
MCPSafe is a web-based security scanner for Model Context Protocol servers. It performs pre-install audits using static analysis and multi-LLM consensus to detect vulnerabilities, typosquatting, and permission issues. Designed for developers and registry operators to ensure safe MCP deployments.
MCPShield Agent is an open-source CLI tool that uses AI to scan and secure MCP servers. It automates vulnerability detection and integrates with agent-based security workflows, helping administrators maintain secure server environments.
