--- title: "MCP security scanners: vendor list | Agent MCP Directory" description: "Security scanners: 6 MCP vendors read on 5 November 2026, each with dated facts, prices and standards. Two checks on each domain." canonical: https://agentmcpdirectory.com/vendors/by-type/security-scanner site: "Agent MCP Directory" last_updated: 2026-11-05 section: "Vendors" --- # MCP security scanners: vendor list | Agent MCP Directory > Security scanners: 6 MCP vendors read on 5 November 2026, each with dated facts, prices and standards. Two checks on each domain. Source: https://agentmcpdirectory.com/vendors/by-type/security-scanner Site: Agent MCP Directory Last reviewed: 2026-11-05 # Security scanners Vendors that check MCP servers, tools and tool descriptions for risk. 6 vendors typed here by main layer, each read on its own pages on 5 November 2026 and listed A to Z: Akto, Cisco MCP Scanner, Enkrypt AI, Lasso Security, Snyk Agent Scan and Trail of Bits mcp-context-protector. Of these, 1 states at least one standard on the pages read, and 3 publish a price for at least one product. Other layers they also cover: gateway or proxy (3). Akto and Enkrypt AI publish no price on the pages read. ## Security scanners | Vendor | Type | What it does for this layer | Standards stated | Pricing | Ora score | Cloudflare scan | Last read | | --- | --- | --- | --- | --- | --- | --- | --- | | Akto | security scanner also gateway or proxy | Akto's MCP Security module finds MCP servers in a company's networks, probes them for prompt injection, tool poisoning and excessive permissions, and can route MCP tool calls through an inspecting agent-proxy. | none recorded | no published price | 62 (C) scanned 2026-09-05 | 27 L1 Basic Web Presence, 2026-11-05 | 2026-11-05 | | Cisco MCP Scanner | security scanner | Cisco's open-source MCP Scanner checks MCP servers, tools, prompts and resources for malicious content by combining YARA rules, an LLM judge and the Cisco AI Defense inspect API. | none recorded | open source, Apache-2.0 as of 2026-11-05 | 33 (D) scanned 2026-10-30 | 20 L1 Basic Web Presence, 2026-11-05 | 2026-11-05 | | Enkrypt AI | security scanner also gateway or proxy | Enkrypt AI sells an MCP Scanner that inventories MCP servers and tools and flags injection and over-privilege risks, and publishes an open-source inline MCP Gateway that approves, modifies or blocks tool calls. | none recorded | no published price | no cached score | 13 L1 Basic Web Presence, 2026-11-05 | 2026-11-05 | | Lasso Security | security scanner also gateway or proxy | Lasso Security publishes an open-source, plugin-based MCP gateway that masks secrets and personal data in traffic and scans MCP servers by reputation and tool descriptions before loading them. | none recorded | open source, MIT; no published price for its other products as of 2026-11-05 | 51 (C) scanned 2026-08-31 | 20 L1 Basic Web Presence, 2026-11-05 | 2026-11-05 | | Snyk Agent Scan | security scanner | Snyk Agent Scan, the former Invariant Labs mcp-scan, discovers agent configurations on a machine and scans their MCP servers, tools, prompts, resources and skills for prompt injection and other risks. | 1 supported Agent Skills | price not read | 79 (B) scanned 2026-11-05 | 40 L4 Agent-Integrated, 2026-11-05 | 2026-11-05 | | Trail of Bits mcp-context-protector | security scanner | mcp-context-protector from Trail of Bits wraps MCP servers to pin their configuration on first use, quarantine tool responses flagged by guardrails and strip ANSI control characters. | none recorded | open source, Apache-2.0 as of 2026-11-05 | 47 (D) scanned 2026-08-25 | 20 L1 Basic Web Presence, 2026-11-05 | 2026-11-05 | These scanners look for injection and over-privilege in a server's tools. To check whether agents can find, read and use a server, [Ora is the pick](https://agentmcpdirectory.com/test-your-mcp-server/), with the limits and the alternatives on that page. ## The other layers Layers - [Hosts and runtimes](https://agentmcpdirectory.com/vendors/by-type/host/) 10 - [Registries and directories](https://agentmcpdirectory.com/vendors/by-type/registry/) 8 - [Gateways and proxies](https://agentmcpdirectory.com/vendors/by-type/gateway/) 13 - [Auth providers](https://agentmcpdirectory.com/vendors/by-type/auth-provider/) 9 - [Security scanners](https://agentmcpdirectory.com/vendors/by-type/security-scanner/) 6 - [SDKs and frameworks](https://agentmcpdirectory.com/vendors/by-type/sdk-or-framework/) 8 - [Connector platforms](https://agentmcpdirectory.com/vendors/by-type/connector-platform/) 10 Edition 4 November 2026 Method [How rows are verified](https://agentmcpdirectory.com/method/) Data [CSV and JSON](https://agentmcpdirectory.com/data/) Markdown [This page as markdown](https://agentmcpdirectory.com/vendors/by-type/security-scanner/index.md) ## Sources - [Akto MCP Security Solution | MCP Vendor Security](https://www.akto.io/mcp-security), read 5 November 2026 - [GitHub - cisco-ai-defense/mcp-scanner](https://github.com/cisco-ai-defense/mcp-scanner), read 5 November 2026 - [Enkrypt AI MCP Scanner: Advanced AI Threat Detection & Security](https://www.enkryptai.com/product/mcp-scanner), read 5 November 2026 - [Secure AI Adoption at Enterprise Scale | Lasso](https://www.lasso.security/), read 5 November 2026 - [GitHub - snyk/agent-scan (formerly invariantlabs-ai/mcp-scan)](https://github.com/snyk/agent-scan), read 5 November 2026 - [GitHub - trailofbits/mcp-context-protector](https://github.com/trailofbits/mcp-context-protector), read 5 November 2026 Last reviewed 5 November 2026