Security scanners
Vendors that check MCP servers, tools and tool descriptions for risk. 6 vendors typed here by main layer, each read on its own pages on 5 November 2026 and listed A to Z: Akto, Cisco MCP Scanner, Enkrypt AI, Lasso Security, Snyk Agent Scan and Trail of Bits mcp-context-protector.
Of these, 1 states at least one standard on the pages read, and 3 publish a price for at least one product. Other layers they also cover: gateway or proxy (3). Akto and Enkrypt AI publish no price on the pages read.
Security scanners
| Vendor | What it does for this layer | Pricing | Ora score |
|---|---|---|---|
| Akto | Akto's MCP Security module finds MCP servers in a company's networks, probes them for prompt injection, tool poisoning and excessive permissions, and can route MCP tool calls through an inspecting agent-proxy. | no published price | 62 (C) scanned 2026-09-05 |
| Cisco MCP Scanner | Cisco's open-source MCP Scanner checks MCP servers, tools, prompts and resources for malicious content by combining YARA rules, an LLM judge and the Cisco AI Defense inspect API. | open source, Apache-2.0 as of 2026-11-05 | 33 (D) scanned 2026-10-30 |
| Enkrypt AI | Enkrypt AI sells an MCP Scanner that inventories MCP servers and tools and flags injection and over-privilege risks, and publishes an open-source inline MCP Gateway that approves, modifies or blocks tool calls. | no published price | no cached score |
| Lasso Security | Lasso Security publishes an open-source, plugin-based MCP gateway that masks secrets and personal data in traffic and scans MCP servers by reputation and tool descriptions before loading them. | open source, MIT; no published price for its other products as of 2026-11-05 | 51 (C) scanned 2026-08-31 |
| Snyk Agent Scan | Snyk Agent Scan, the former Invariant Labs mcp-scan, discovers agent configurations on a machine and scans their MCP servers, tools, prompts, resources and skills for prompt injection and other risks. | price not read | 79 (B) scanned 2026-11-05 |
| Trail of Bits mcp-context-protector | mcp-context-protector from Trail of Bits wraps MCP servers to pin their configuration on first use, quarantine tool responses flagged by guardrails and strip ANSI control characters. | open source, Apache-2.0 as of 2026-11-05 | 47 (D) scanned 2026-08-25 |
These scanners look for injection and over-privilege in a server's tools. To check whether agents can find, read and use a server, Ora is the pick, with the limits and the alternatives on that page.