Security Framework

Unified NIST and OWASP security frameworks MCP server with 41 tools covering vulnerability triage, compliance mapping, and threat

zer0-kr 12
Claude CodeClaude DesktopGeneric
View source ↗

Security Framework combines NIST and OWASP data sources into a unified MCP server providing over 4,700 security data points. NIST coverage includes SP 800-53 controls (1,196 items) and CSF 2.0 (225 items), while OWASP data spans 418 projects, ASVS 5.0, WSTG, Top 10 lists, MASVS, 815+ CWEs, and 559 CAPEC patterns. Live APIs provide NVD/CVE vulnerability data, CISA KEV, and EPSS scores. The 41 tools support security search, control retrieval, vulnerability triage, compliance mapping, threat modeling, and stack assessment.

Source

Repository: https://github.com/zer0-kr/security-framework-mcp

Maintain Security Framework?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[Security Framework on getagentictools](https://getagentictools.com/mcp/zer0-kr-security-framework-mcp?ref=badge)