Midkernel
Pay per useActively maintained
not read yet
Use
- For
- Developers and security teams who need to review software repositories for security threats.
- Price
- Pay per usepricing page, read Nov 1, 2026
- Activity
- Actively maintainedrelease yesterday · site updated 2 days ago
- Company
- Midkernel, Inc. · since 2026privacy policy · per their About page
- Used for
- review a software repository for security issues
- follow threat classes and their public sources
- triage pull requests before they are merged
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantsmidkernel.com ↗
Pay per use
- Founded2026per their About page ↗
- HeadquartersNew York, USper their site
- Run byMidkernel, Inc.privacy policy ↗
- Trust centertheir owntrust center ↗
- Data processing agreementpublishedDPA ↗
- Privacy policy updated2026-10-31privacy policy ↗
These are Midkernel's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP servercom.midkernel/threat-intelverified in the MCP registry
- Stateanswers, 6 toolschecked 2026-11-01
- Address to connectwww.midkernel.com/security/app/mcp/threat-intel
- MCP docsmidkernel.com/security/docs/mcpthe vendor's page ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
Snyk
Scans source code, open source dependencies, container images and infrastructure-as-code for vulnerabilities, and suggests fixes in the IDE, CLI and pull requests.
63.1kActiveFrom $25/mo2015 - #2
Sonar
Analyzes source code statically in IDEs, CI pipelines and pull requests, reporting bugs, code smells, vulnerabilities and coverage against quality gates.
72.4kActiveFrom $34/mo2007 - #3
SonatypeMCP · sign-in
Hosts artifact repositories and scans open source dependencies, blocking malicious or vulnerable components before they enter builds.
69.4kActiveFrom $1,200/yr2008 - #4
Nexus Void Automated Penetration Testing
Runs continuous automated penetration testing and compliance verification with human-supervised attack agents.
42.9kActiveFrom $49/mo - #5
ShipReady MetricsMCP · open
Scores engineering and security posture from connected repositories and cloud systems, mapping findings to compliance frameworks and estimating risk dollars.
42.9kActiveFrom $29.99/user/mo
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use Midkernel for?
Sign in to leave a noteWhat is Midkernel?
Reviews a software repository for security issues, and tracks threat classes and their public sources through threat intel. It is listed in the Atlas under Security and made by Midkernel, Inc.
Who is Midkernel for?
Developers and security teams who need to review software repositories for security threats.
How much does Midkernel cost?
Midkernel charges per use, per its pricing page on 2026-11-01.
Is Midkernel free?
No. Its pricing page showed no free plan on 2026-11-01.
Is Midkernel still maintained?
Actively maintained: release yesterday · site updated 2 days ago.
Who owns Midkernel?
Midkernel is run by Midkernel, Inc., per its privacy policy (2026-11-01).
Is Midkernel safe?
We do not audit vendors. What Midkernel publishes, read 2026-11-01: a trust center.
What are alternatives to Midkernel?
In Security, by use: Snyk, Sonar, Sonatype, Nexus Void Automated Penetration Testing, ShipReady Metrics.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.