Category Hub
Risk Screening apps and integrations
Risk Screening apps help teams and individuals assess cybersecurity, fraud, compliance, privacy, vendor, and identity risks using connected records, threat intelligence, or submitted messages, links, domains, and packages. Listings cover security-posture reviews, vulnerability and dependency scans, scam and breach checks, compliance evidence, KYB or AML screening, risk prioritization, and remediation guidance.
257 apps
Top risk screening apps
Open full directory →Security
Safeguard
By Safeguard
Safeguard helps users inspect software supply chain risk from ChatGPT, including vulnerabilities, SBOMs, findings, projects, components, policies, guardrails, compliance reports, remediation plans, SCM integrations, notifications, and organization workflows.
Tools: 438 · Prompts: 3
Business & Operations
Sprinto
By Sprinto
Sprinto helps authorized organization users inspect compliance status, search policies and evidence, answer security questionnaires, and manage audits, controls, risks, vendors, people, policies, tasks, and evidence from ChatGPT.
Tools: 443 · Prompts: 3
Developer Tools
Strix
By Strix
Strix brings AI penetration testing and vulnerability management into ChatGPT. Review recent tests, prioritize open findings by severity, and inspect evidence and remediation steps. Start tests against your authorized web applications, APIs, and repositories; retest findings; and open fix pull requests or tickets through connected integrations. Check pull request security reviews and supply-chain findings, manage recurring schedules and assets, and summarize your workspace's security activity. Sign in with your Strix account using OAuth. Access follows your Strix workspace role and resource permissions. Starting tests, retests, reviews, and other security workflows may use Strix credits and send traffic to the selected targets. Some capabilities require an eligible Strix plan.
Tools: 181 · Prompts: 3
Business & Operations
Vanta
By Vanta, Inc.
Vanta helps users review compliance tests, controls, evidence, policies, risks, vendors, audits, personnel, access reviews, and vulnerabilities in ChatGPT. Supported workflows include managing tests and controls, uploading and evaluating evidence, creating and deleting policies, updating risk and vendor records, configuring SLAs, and managing AI governance records, questionnaires, and knowledge base resources. Users can also create tickets in connected services and manage privacy requests. Policy approval and privacy workflows can send notifications, and knowledge base resources can be published to the Trust Center. Available tools depend on the connected organization's enabled features and the user's permissions.
Tools: 131
Other
LimaCharlie
By LimaCharlie
Automate using the LimaCharlie cybersecurity operation platform, from EDR, XDR, Vulnerability, Cloud Security and more.
Tools: 175
Business & Operations
Brandefense
By Brandefense INC
Brandefense helps security teams investigate incidents, monitor attack surface and brand abuse, analyze threat intelligence, manage assets and users, run authorized scans, and start confirmed takedown workflows from ChatGPT.
Tools: 129 · Prompts: 3
Data-Analytics
Brandefense MCP
By Brandefense INC
Brandefense connects Claude to the Brandefense external threat intelligence platform, so you can investigate and respond to external cyber risks without leaving the conversation. What you can do: - Triage incidents: list and filter brand protection and security incidents, review evidence and indicators, assign them, add notes, and change their status - Explore threat intelligence: threat actors, campaigns, CVEs, exploits, and the CVEs that affect your assets - Search dark web, breach, and leak sources for domains, email addresses, keywords, and usernames, and look up IPs, URLs, and file hashes - Inspect your external attack surface: assets, subdomains, IP addresses, open ports, SSL certificates, websites, and findings - Run on-demand domain scans and start phishing site and social media account takedowns - Create reports, work with dashboards, and export audit logs - Manage assets, policies, users, and teams How access works: Sign in with your existing Brandefense account. Claude can only see and do what your account already can: Brandefense checks your role, team, modules, and licenses on every request. MSSP users keep access to the customer organizations they already manage. Access to AI assistant connections is controlled in your organization's Brandefense settings, and you can disconnect Claude at any time. Some tools change data or take external action, such as status changes, user management, credit-spending searches and scans, and takedown requests. These tools are annotated as write actions. Requires an active Brandefense subscription.
Tools: 128
Data-Analytics
ScanMalware
By Triop AB
ScanMalware renders URLs in a sandboxed headless browser and keeps every scan in a searchable archive. This connector lets Claude ask what the archive already knows about a domain, URL or IP address, and pivot from one suspicious page to related infrastructure. What it can do: - Read a scan's verdict and risk factors, network requests, IOCs, TLS and JARM details, detected technologies, YARA matches, OCR text and RDAP data. - Find related scans by domain, IP, ASN, JARM signature, favicon hash, screenshot hash, TLSH/ssdeep/sdhash fuzzy hash, OCR text, tracking keys or JavaScript fingerprint. - Look up Certificate Transparency records for a domain or IP. - Submit a new URL for scanning and wait for the result. 126 of the 128 tools are read-only. The two write tools submit a URL for scanning and vote on a scan as safe or malicious. Every new scan must declare its visibility: "public" publishes the URL and its results in the public feed, while "unlisted" keeps them out of public listings. No account or API key is needed. ScanMalware is operated by Triop AB in Sweden.
Tools: 128
Productivity
CloudBees Unify MCP Server
By CloudBees
CloudBees Unify is a DevSecOps platform for building, releasing, and securing software. This connector gives an AI agent direct access to it: inspect components and environments, run and troubleshoot workflows, manage feature flags and their targeting, orchestrate releases, and review security findings and policy results. Agents authenticate with the same sign-in used for the web interface, and tool access can be scoped per request so an agent receives only the tools relevant to its task.
Tools: 110
Developer Tools
SentinelX
By PensaInfra
SentinelX lets you manage your Linux, macOS, and Windows servers from ChatGPT — no SSH required. Install a small open-source agent on any Linux, macOS, or Windows host, and ChatGPT can run inspection commands, manage services (systemd, launchd, or Windows services), read/search/edit files, run scripts, upload files, and call out to integrations like Cloudflare DNS, Resend, and Telegram. Every action is constrained by a per-host allowlist that you control. The agent only runs commands and services you've explicitly declared safe, rejects anything outside the policy at the agent boundary, and your OS's file permissions still apply on top. You can connect multiple hosts and label them however you want. Typical uses: check uptime and disk space, restart services, tail logs, edit config files, run quick scripts, manage DNS records, send notifications. The agent is open source on GitHub (github.com/pensados/sentinelx-cloud-core). Authentication uses OAuth 2.0 with PKCE and Dynamic Client Registration, scoped per user.
Tools: 90 · Prompts: 3
Data-Analytics
CISOGenie
By CISOGenie
Track risks, manage compliance tasks, and pull live posture dashboards directly from Claude. Make CISOGenie a native part of your security and GRC workflow - an AI-native risk-led platform that helps your team stay audit-ready across SOC 2, ISO 27001, DPDPA and 35+ frameworks, turning hours of manual triage and reporting into a single conversation.
Tools: 79
Developer-Tools
WP Umbrella
By WP Umbrella
WP Umbrella is a WordPress maintenance platform for agencies and freelancers managing many client sites. This MCP server connects your AI assistant to your WP Umbrella account, so you can maintain every WordPress site from Claude in plain language, without logging into each dashboard. What you can do: - Updates: find pending plugin, theme and WordPress core updates across all sites, run them in bulk, and set plugin update automations. - Backups: list backups, trigger incremental backups, adjust backup settings and get download links. - Security: scan for vulnerabilities, review malware detections, manage firewall and hardening options, check security status and clean hidden admin accounts. - Monitoring: check uptime, performance scores, PHP errors and broken links; read the activity log. - Clients: manage customers and labels, log custom maintenance work and generate white-label client reports. - Database: optimize WordPress databases. Example prompts: "Which of my WordPress sites have plugin updates pending?" "Back up the client site, then update all its plugins." "Are any of my sites affected by a known vulnerability?" "Which sites went down this month, and for how long?" "List the sites with PHP errors and the plugins causing them." "Generate this month's maintenance report for Acme Corp." Use it for monthly maintenance routines, security audits, incident checks and client reporting, whether you manage 10 or 5,000 WordPress sites. One connection covers your whole fleet, whatever the host, instead of one site at a time. Sign in securely with your WP Umbrella account through OAuth and you choose which sites the assistant can access. Before any change, such as updates, backups or security settings, the assistant states what will change on which sites and waits for your confirmation. Requires a WP Umbrella account. Works with Claude and any MCP-compatible client.
Tools: 71
Productivity
LASEC
By LASEC
LASEC vous aide à structurer et piloter votre gouvernance cyber au même endroit : analyses de risques, audits, registres, mesures de sécurité, plans d’actions et synthèses. Retrouvez facilement tout ce qui a été produit dans l’application LASEC, complétez vos travaux et gardez une vision claire de votre niveau de sécurité dans la durée.
Tools: 68
Security
Codex Security Cloud
By OpenAI
Run security scans, investigate findings, and manage workflows for the current workspace.
Tools: 65 · Prompts: 3
Business & Operations
Coram
By Coram AI
Coram helps authorized users search recorded CCTV footage, inspect camera and access-control status, review security alerts and detections, and audit physical-security activity through ChatGPT.
Tools: 63 · Prompts: 3
Legal
Ansvar AI
By Ansvar AI
Run regulated security and privacy work inside Claude, with every claim traced to a source you can show an auditor. Ansvar answers questions on NIS2, DORA, GDPR, the EU AI Act, the Cyber Resilience Act (CRA) and national transpositions such as Sweden's Cybersäkerhetslagen, then runs the work built on them: gap analysis, DPIA, FRIA, LINDDUN privacy threat modelling, STRIDE threat models, and automotive TARA under ISO/SAE 21434 and UNECE R155/R156. Ask things like: "Does NIS2 apply to a 60-person SaaS provider in Sweden?" "Compare incident-reporting deadlines under DORA and NIS2." "Map our ISO 27001 controls to CRA vulnerability-handling obligations." "Is this citation still in force?" "What changed in German cybersecurity law this quarter?" "Draft a DPIA for our new HR analytics tool." "Score this CVE for an internet-facing system that can't be patched yet." Vulnerability intelligence is built in: CVE lookup, CVSS environmental scoring, EPSS, CISA KEV status, public exploit references, and VEX export. Coverage: 46 licensing-audited jurisdictions, 262 security frameworks, 5.7M citable legal provisions, court decisions and regulator guidance — plus licensed clause text for ISO/IEC 27001, 27002, 27005, 42001 and ISO/SAE 21434 through SIS (Swedish Institute for Standards). Nothing is scraped. Upload your own policies, contracts or tenders and get paragraph-level, hash-anchored citations that stay provable months later. Where no verified source exists, Ansvar marks the gap instead of papering over it. Grounded, not generated. Built for Legal professionals, CISOs, DPOs, GRC teams, security architects and consultants who need answers they can defend. EU-hosted core. OAuth 2.1. Nothing you send trains anyone's model. Free to start, no card required.
Tools: 61
Business & Operations
Bag Finder
By SplitDaBag
Bag Finder helps authenticated SplitDaBag users understand saved scans, review authorized social performance, clarify goals, compare verified opportunities, and organize evidence-based next steps without guaranteeing outcomes.
Tools: 57 · Prompts: 3
Robtex Network Intelligence
By Robtex
Look up DNS records, check IP and domain reputation against 100+ blocklists, query AS/network data, and explore the Bitcoin Lightning Network — all directly from Claude. Robtex provides 44 tools covering forward and reverse DNS lookups, IP geolocation and threat intelligence, domain popularity rankings from 5 independent sources (Majestic, Tranco, Cloudflare Radar, Umbrella, CrUX), hostname parsing, MAC address vendor lookups, and Lightning Network node/channel discovery. Free, no authentication required.
Tools: 54
Security
Orca Security
By Orca Security
The Orca MCP Server extends Orca's reasoning into Claude, so your team can ask security questions from where the work already happens: Claude.ai in the browser, the Claude desktop app, and Claude Code in the terminal. The MCP Server carries correlated context from Orca's Unified Data Model, not raw data streams. Every asset, alert, identity, and dependency is already stitched together before Claude is asked a question, so answers factor in reachability, blast radius, and business impact from the first response. Tools that stitch sources together at query time return inconsistent, fragmented conclusions. Ask Claude to run in-depth analysis on an alert, query assets, investigate the code origins of a runtime risk, generate an executive readout, or kick off a remediation workflow. All of it happens without leaving Claude. Every response pulls asset, attack path, ownership, and remediation context in a single call, so end users get senior-analyst judgment baked into every answer. For teams that want the reasoning without writing the prompts, Orca maintains the AI Skills Hub, an open-source GitHub repo of agent skills that sits on top of the MCP Server. Analysts type "triage alert orca-9012345" in Claude, and the orca-alert-triage skill handles retrieval, analysis, and formatting. Teams can fork it, modify it, and extend it to their own use cases. The result: security and engineering teams work across cloud, code, and AI from a single workspace, with Claude as the interface and Orca's reasoning behind every answer.
Tools: 51 · Prompts: 3
Productivity
devguard
By devguard AG
devguard is a Swiss GRC platform for running an ISMS against ISO 27001, NIS2, SOC 2 and other frameworks. This connector gives Claude read-only access to your organization's compliance data, so you can ask questions in plain language instead of clicking through reports. Ask which controls are still unmapped in a framework, what is due or overdue this month, who owns a risk or asset, which integration checks are failing, how your Statement of Applicability was last approved, or how you have answered a security questionnaire question before. Claude can read policies section by section, summarize open audit findings, and search your knowledge base. Access is strictly read-only: Claude can never create, change or delete anything in devguard. You sign in with your devguard account, and Claude sees only the organization you authorize.
Tools: 51
Developer-Tools
Extenshi
By Maksim Kosterin
Extenshi gives Claude live data on browser extensions from the Chrome Web Store, Firefox Add-ons and Microsoft Edge Add-ons. For people who use extensions • Ask whether an extension is safe: permissions it requests, security findings, how risky its access is, and what its reviews say. • Paste a list of the extensions you have installed and get a risk summary for all of them at once. • Find safer or better-rated alternatives to an extension you are unsure about. For people who build extensions • Research a niche: competitors, user counts, ratings, what reviewers complain about. • Plan and build an extension with a step-by-step development guide, templates, manifest import and localization, icon and welcome-page workflows. • Keep a hosted privacy policy and store listing in sync with your project, and set up payments with Extenshi Pay. Try asking Claude • "Is the extension 'X' safe to install?" • "Here are my extensions — which ones have risky permissions?" • "Find a well-rated alternative to X that requests fewer permissions." • "What do users complain about in the top tab-manager extensions?" • "Help me build a Chrome extension that does Y, from idea to store release." Sign in with your Extenshi account. Getting started is free: every account includes a free allowance of catalog reads, and the documentation search and development guide are always free. Hosted privacy policies and some project features require a Pro plan. Extenshi never asks for your browser data or passwords. Tools that change anything in your account are clearly marked, and payment setup, KYC and agreements stay in your browser.
Tools: 48
Productivity
nebty
By nebty GmbH
Fake shops, phishing sites and fake profiles that copy your brand cost you customers, money and trust. nebty is the early warning system against brand impersonation: it scans the internet around the clock for lookalike domains, phishing websites, fake social media profiles, scam ads and malicious search results, scores every finding by risk and gets the dangerous ones taken down with registrars, hosting providers and platforms. With this connector, your brand protection is one question away. Ask which lookalike domains pose the highest risk right now, which fake Instagram, Facebook or LinkedIn profiles and Meta ads were found, and how your takedowns are progressing, with their complete history. Review findings directly in the chat: mark profiles and ads as trusted or dismiss false positives, always within your team's existing permissions. Connect your nebty account in seconds via secure OAuth. New scans and takedown requests run in the nebty dashboard, where nebty handles the removal for you.
Tools: 47
Developer-Tools
GAdvisory
By Gelhaus Solutions
GAdvisory is a security advisory database and CNA workflow platform for security teams, software maintainers and vulnerability numbering authorities. It provides an alternative to GitHub Security Advisories, with advisories stored on infrastructure you control and organized by project rather than tied to a repository. Manage advisory drafts, review, coordinated-disclosure embargoes and publication. Record severity and affected version ranges, work with CVE, GCVE and GAVR identifiers, and publish through public advisory pages, branded portals and feeds. Canonical JSON records can be mirrored into a git repository you control.
Tools: 47
Developer-Tools
SecureNow
By SecureNow
SecureNow protects Node.js and Next.js applications in production. Connect your SecureNow account to investigate what is attacking your apps: recent detections, the requests and traces behind them, logs, IP reputation, and plain-English forensic queries over your traffic. When you connect, you choose the access level. Investigate is read-only: it can read your security data and run forensic queries but can't change anything. Investigate and respond also lets Claude block an IP, add a rate limit or change a detection rule; every change waits for your approval in the conversation and is written to your audit log. SecureNow only reaches the organization you approved, and you can disconnect it at any time under Settings > Connected apps.
Tools: 46
Need a custom risk screening integration built?