Vulnrable
Actively maintained
≈ 1visits/mo
Little sign of use · estimate, read Oct 14, 2026
- For
- Developers and security reviewers choosing MCP servers to run inside AI agents, checking their dependencies and known vulnerabilities
- Activity
- Actively maintainedsite updated 3 days ago
- Used for
- compare third-party package counts across MCP servers
- browse recent CVEs, exploits and security news
- check packages against known vulnerability databases
- Has an MCP server (1 in the registry)public registry →
- MCP servercom.vulnrable/vulnrableverified in the MCP registry
- Stateanswers, 4 toolschecked 2026-10-21
- Address to connectvulnrable.com/api/mcp
- MCP docsvulnrable.com/mcpthe vendor's page ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
Snyk
Scans source code, open source dependencies, container images and infrastructure-as-code for vulnerabilities, and suggests fixes in the IDE, CLI and pull requests.
63.1kActiveFrom $25/mo2015 - #2
Fluid Attacks
Scans applications for vulnerabilities with automated tools and human penetration testing, ranks findings by exploitability and tracks their remediation.
4.3kActiveFree plan - #3
WireMock CloudMCP · sign-in
Hosts stateful simulations of third-party APIs and services so tests and agents run against fake dependencies instead of production.
1.9kActiveFree plan - #4
Vioscale AI
Ranks software tools by independent adoption metrics and sourced facts, weighted to your selection criteria.
1.4kActiveFree - #5
KodemMCP · sign-in
Correlates code, dependency and live-workload runtime evidence to show which vulnerabilities are reachable, and verifies that fixes hold.
361ActiveFrom $20,000/yr2021 - #6
PropbarMCP · sign-in
Pulls sold prices, planning applications, flood and crime data for any UK address into one property record.
223ActiveFrom ≈ $33/mo2023
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use Vulnrable for?
Sign in to leave a noteWhat is Vulnrable?
Aggregates CVE, exploit and package advisory data from NVD, OSV and GitHub into a threat board with MCP dependency counts. It is listed in the Atlas under Developer tools.
Who is Vulnrable for?
Developers and security reviewers choosing MCP servers to run inside AI agents, checking their dependencies and known vulnerabilities
Do people use Vulnrable?
Little sign of use: ≈ 1 visits/mo · estimate, 2026-10.
Is Vulnrable still maintained?
Actively maintained: site updated 3 days ago.
What are alternatives to Vulnrable?
In Developer tools, by use: Snyk, Fluid Attacks, WireMock Cloud, Vioscale AI, Kodem, Propbar.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.