Best Alternatives to Feldspar free repository security scan

Ida Pro MCP

Runtime: npx

Connects AI assistants to IDA Pro for decompilation, disassembly, database changes, and reverse-engineering workflows.

Jadx AI MCP

Runtime: uvx

Connects JADX-GUI to MCP so Claude can inspect decompiled Android classes, methods, fields, and smali.

Apktool MCP Server

Runtime: uvx

Automates Android APK decoding, inspection, modification, and rebuilding through Apktool and MCP.

Mobb Vibe Shield MCP

Runtime: npx

Automates security vulnerability remediation by analyzing SAST reports or scanning repos, providing fix recommendations via MCP.

Ui Ux Suite

Runtime: npx

UI/UX design-audit MCP server: scores a project on 12 dimensions vs WCAG 2.2 + APCA.

Vibescan MCP Server

Runtime: uvx

MCP server for VibeScan — scan projects for leaked secrets and security issues

MCP Maigret

Runtime: npx

Searches public sites for usernames and analyzes URLs through Maigret, with Docker-backed reports in several output formats.

Depguard

Runtime: npx

Audits npm packages and projects for supply-chain risks, vulnerabilities, AI-generated code debris, and SBOM output through MCP.

MCP Security Audit

Runtime: npx

Audits npm dependencies against the remote registry and reports severity, CVE, CVSS, and upgrade information.

Gatetest

Runtime: npx

GateTest is a CLI plus GitHub Action that runs 120+ static-analysis modules against a codebase and uses Claude to auto-fix what it can, replacing tools like SonarQube, Snyk, ESLint, and Lighthouse with one gate decision.

PabloLec Keyprobe MCP

Runtime: npx

Audit certificates and keystores to surface expiry risks, weak algorithms, and misconfigurations.…

MCP Server

Runtime: npx

Remote MCP server for querying RAD Security findings, reports, and runtime data across Kubernetes and cloud environments.