Security
Empowers AI coding assistants with the knowledge and tools of a senior security engineer to automatically detect and remediate code vulnerabilities.
Security-mcp addresses the critical gap in AI-assisted development by integrating a robust security enforcement layer directly into popular AI coding assistants like Claude Code, GitHub Copilot, Cursor, and Codex. It transforms the security review process from a slow, expensive, and expertise-dependent task into an automated, inline fix-generation system. Covering 18 security checks including secrets, dependencies, cryptography, injection, and cloud configuration, it ensures every code change is vetted against leading security frameworks like OWASP, MITRE ATT&CK, NIST, and PCI DSS. This tool offers two distinct modes: a daily '/senior-security-engineer' for immediate inline fixes and a comprehensive '/ciso-orchestrator' for deep, multi-agent audits, allowing developers to ship faster and more securely without needing specialized security background.