MCP App Store

Category Hub

Risk Screening apps and integrations

Risk Screening apps help teams and individuals assess cybersecurity, fraud, compliance, privacy, vendor, and identity risks using connected records, threat intelligence, or submitted messages, links, domains, and packages. Listings cover security-posture reviews, vulnerability and dependency scans, scam and breach checks, compliance evidence, KYB or AML screening, risk prioritization, and remediation guidance.

23 apps

Top risk screening apps

Open full directory →
Business
Vanta

Vanta

By Vanta, Inc.

Manage your trust program using natural language. You can ask questions about your compliance status, understand which tests need attention, and draft infrastructure fixes without leaving where you work. Try questions like: - "What's my SOC 2 completion status?" - "Show all my most important failing tests", - "Draft a PR to fix my infrastructure misconfigurations within this repo" - "Summarize our gaps ahead of the audit"

Tools: 25

View details →
Business
Sumsub

Sumsub

By Sumsub

Bring your compliance operations into ChatGPT. Connect to your Sumsub account to onboard applicants, generate verification links, and pull live data on identities, businesses, transactions, AML screening cases, and fraud networks—all in plain language. Triage your review queue by risk, assemble due-diligence dossiers, investigate suspicious activity, and draft regulatory reports without clicking through the Dashboard. Turn full-cycle verification into an AI-powered workflow that moves at the speed of conversation.

Tools: 17

View details →
Security
Defense.com Threat Analysis

Defense.com Threat Analysis

By Defense.com Threat Analysis

Connect Claude to your Defense.com portal to query open threats, security issues, and remediation status. Filter by risk level, source type, assignee, or keyword. View team workload and assignments. Includes interactive security training sessions. Supports 200+ source type aliases for natural language queries like 'show me pentest findings' or 'get m365 threats'.

Tools: 16 · Prompts: 0

2026-03-31
View details →
Developer Tools
Mnemom

Mnemom

By Mnemom

Mnemom is trust infrastructure built for agents, not just the humans who run them. In one chat you can look up an agent's Continuous Trust Rating — the score, the grade, and the accountability evidence behind it — and confirm it's cryptographically signed, not merely asserted. Drop your own alignment card and get an instant trust read back; claim a verifiable identity with no human in the loop; and walk away with an embeddable Trust Rating badge for your README or agent card. Every read is honest about what it knows: a quiet record reads as quiet, never as a red flag. The system tells the truth — and view-source proves it.

Tools: 15

View details →
Business-Productivity
Norton

Norton

By Gen Digital Inc

Stay protected while you chat with Claude. Norton brings real-time, AI-powered scam detection directly into your conversations, backed by the Norton Genie AI assistant. Share suspicious emails, texts, messages, images, or links for instant analysis and clear cyber safety guidance to help you avoid phishing, scams, and malicious content before you click. You can also ask everyday questions about security, privacy, identity protection, and device performance, and get trusted answers right where you’re already chatting.

Tools: 1 · Prompts: 4

2026-02-28
View details →
Security
AJAXX Data Scrubber

AJAXX Data Scrubber

By FORTRESS APPS LLC

AJAXX Data Scrubber in ChatGPT provides read-only information about digital privacy risks and data broker exposure. It explains how personal data appears online, how removal services work, and answers common questions about scans, monitoring, and protection options. This ChatGPT app does not run scans, show personal scan results, perform removals, or manage accounts. For secure account access, scans, removals, billing, or support, users are directed to the official AJAXX website.

Tools: 7

View details →
Productivity
Malwarebytes

Malwarebytes

By Malwarebytes Inc.

Verify links, emails, phone numbers, and domains against Malwarebytes threat intelligence directly from Claude. Get instant scam verdicts, domain ownership details, and risk levels for unknown callers, shortened URLs, and suspicious messages before you click, call, or reply. Report suspicious indicators back to Malwarebytes to help protect others.

Tools: 1 · Prompts: 3

2026-01-30
View details →
Business
DigiTrust Evidence Assistant

DigiTrust Evidence Assistant

By DigiTrans LLC

DigiTrust Evidence Assistant for ChatGPT is a public trust surface that lets prospects, partners, security reviewers, and procurement teams experience evidence workflows inside ChatGPT. The app uses synthetic demo evidence only and exposes read-only tools that help users list demo evidence packets, summarize packet status, generate customer-safe assurance summaries, review buyer-readiness gaps, explain the evidence workflow, and compare demo evidence snapshots. It does not access paid workspaces, raw customer data, credentials, billing data, secrets, or production evidence records. Pricing, checkout, subscriptions, billing, workspace onboarding, and paid entitlements remain outside ChatGPT on DigiTrust-owned web properties.

Tools: 6

View details →
Developer Tools
ToolCheck by M8ven

ToolCheck by M8ven

By M8ven Inc.

ToolCheck is M8ven's trust layer for the MCP ecosystem. Give it a GitHub URL or npm package name and it returns an independent trust score (0–100) and a clear verdict (Trusted / Caution / Concern), backed by static code analysis, runtime behavioral observation in a sandbox, CVE scanning, and a semantic check comparing the tool's declared behavior against what its code actually does — catching the gap between "read-only market data" and code that can move your funds.

Tools: 6

View details →
Business
Sprinto

Sprinto

By Sprinto

This ChatGPT app connects to your organization’s Sprinto workspace so you can work with your own compliance information inside ChatGPT Use it to explore questions about your security and compliance posture using the Compliance Knowledge Hub: the policies, procedures, approved questionnaire content, and related documentation your organization maintains in Sprinto. Responses are intended to reflect your documented practices, and when Sprinto returns supporting material, you should see references to those sources so answers can be verified. For vendor security questionnaires and similar requests, you can bring structured questionnaires into the conversation and obtain consistent, context‑aware draft responses drawn from the same Knowledge Hub. Items that cannot be supported clearly from your content may be flagged for human review before you share answers with customers, partners, or auditors. Capabilities depend on your organization’s Sprinto configuration and the content available in your hub. A valid Sprinto sign‑in is required. Currently only supported for US region.

Tools: 5 · Prompts: 1

View details →
Productivity
McAfee

McAfee

By McAfee LLC

Steer clear of scams while you chat. McAfee brings real-time scam detection directly into Claude so you know what to trust before you click. Share suspicious emails, texts, social messages, or links for instant analysis, clear explanations of the risk, and guidance on what to do next.

Tools: 0 · Prompts: 3

2026-04-14
View details →
Developer Tools
Radar Lite

Radar Lite

By Red Sift

Analyze any domain’s email authentication, DNS, and web security configuration. Radar Lite scans your domain, visualizes security scores on a radar chart, and generates a summary with prioritized findings and remediation guidance. Try prompts like: - Radar Lite Evaluate the DNS security of example.com - Radar Lite Compare the DMARC configuration of domain1.com to domain2.com - Radar Lite Give me an assessment of the overall security posture of domain1.com, domain2.com and domain3.com You can ask follow-up questions to clarify any terms and dig deeper into the performed tests.

Tools: 3 · Prompts: 2

View details →
Shopping
Is It Legit by M8ven

Is It Legit by M8ven

By M8ven Inc.

Is It Legit is the consumer brand-trust tool from M8ven. Given a brand name or URL, it analyzes 100+ trust signals and returns a verdict (safe / caution / avoid) with key findings. Designed for "is this site real?" / "should I buy from this brand?" / "is this an Instagram-ad scam?" type questions.

Tools: 3

View details →
Productivity
Bitdefender

Bitdefender

By Bitdefender SRL

Bitdefender Link Checker is a free tool designed to verify URLs, helping users avoid malware, phishing attempts, and counterfeit websites.

Tools: 1 · Prompts: 2

View details →

Miggo

By Miggo

Connect Claude to your Miggo security environment. This extension provides 25 tools to explore and analyze your application security posture including services, endpoints, vulnerabilities, findings, dependencies, and third-party integrations. Use natural language to assess risk, investigate threats, onboard security teams, and prioritize remediation across your entire environment.

Tools: 25

View details →
Data-Analytics

Have I Been Pwned

By Have I Been Pwned

Search email addresses and domains against the world's most widely used data breach corpus. Have I Been Pwned helps individuals determine whether their accounts have appeared in known breaches and enables organisations to investigate exposure across verified domains. Explore detailed breach information, identify exposed data types, review paste and stealer log exposure, and gain trusted security intelligence to better understand account compromise and cyber risk.

Tools: 17

View details →
Data-Analytics

Have I Been Pwned

By Have I Been Pwned

Search email addresses and domains against the world's most widely used data breach corpus. Have I Been Pwned helps individuals determine whether their accounts have appeared in known breaches and enables organisations to investigate exposure across verified domains. Explore detailed breach information, identify exposed data types, review paste and stealer log exposure, and gain trusted security intelligence to better understand account compromise and cyber risk.

Tools: 17

View details →

Defense.com Threat Analysis

By Defense.com Threat Analysis

Connect Claude to your Defense.com portal to query open threats, security issues, and remediation status. Filter by risk level, source type, assignee, or keyword. View team workload and assignments. Includes interactive security training sessions. Supports 200+ source type aliases for natural language queries like 'show me pentest findings' or 'get m365 threats'.

Tools: 16

View details →

Snyk Security

By Snyk Security

Snyk MCP enables AI assistants to perform comprehensive security scanning on code, dependencies, infrastructure, and containers. Integrate Snyk's security capabilities directly into your AI-assisted development workflow to proactively identify and fix vulnerabilities during code generation and review. Supported scanning types: - SAST (Static Application Security Testing): Analyze source code for security vulnerabilities - SCA (Software Composition Analysis): Detect vulnerabilities in open source dependencies - IaC (Infrastructure as Code): Find security misconfigurations in cloud infrastructure - Container Security: Scan container images for vulnerabilities - SBOM/AIBOM: Generate and test Software/AI Bills of Materials

Tools: 11

View details →

Rapid7 Bulk Export

By Rapid7 Bulk Export

Connects to the Rapid7 Bulk Export API to fetch vulnerability and asset data, loads it into a local DuckDB database, and exposes SQL query tools for AI-powered security analysis. Supports export reuse, EPSS-based prioritization, and cross-cloud vulnerability tracking.

Tools: 8

View details →
Business-Productivity

Norton

By Norton (part of Gen Digital Inc.)

Stay protected while you chat with Claude. Norton brings real-time, AI-powered scam detection directly into your conversations, backed by the Norton Genie AI assistant. Share suspicious emails, texts, messages, images, or links for instant analysis and clear cyber safety guidance to help you avoid phishing, scams, and malicious content before you click. You can also ask everyday questions about security, privacy, identity protection, and device performance, and get trusted answers right where you’re already chatting.

Tools: 7

View details →

GoPlus AgentGuard

By GoPlus AgentGuard

GoPlus AgentGuard is an AI-agent security framework. It exposes MCP tools for scanning skills, looking up and managing a trust registry, evaluating runtime actions against policy, and simulating Web3 transactions. 20+ detection rules cover dangerous commands, secret exfiltration, and risky on-chain actions.

Tools: 7

View details →

Socket

By Socket

__Secure your code by default.__ The Socket MCP server brings powerful, real-time dependency scanning directly into Claude. Instantly audit packages from npm, PyPI, Cargo, and more—right inside your chats—with zero setup. Built on the Model Context Protocol (MCP), this extension automatically evaluates packages for: - Vulnerabilities and malware - Supply chain risks - Code quality and maintenance - License compliance With a single command, Claude will return detailed security scores (0–100) across five critical dimensions—helping you make informed decisions and avoid risky dependencies before they hit production.

Tools: 1

View details →

Need a custom risk screening integration built?