Most MCP security scanners we have tried are noisy, endless alerts and false positives. We think developers deserve better. We are looking for early adopters who want to try and help shape something that actually works.

We are building an open-source security scanner to catch below issues:

  - Prompt Injection
  - Indirect Prompt Injection
  - Cross-Origin Escalation
  - Tool Poisoning
  - Tool Name Ambiguity
  - Command Injection
  - Excessive Permission
  - PIl Detection

If this sounds interesting, drop a comment.