A developer has identified a security vulnerability in the Model Context Protocol (MCP) that arises when multiple servers are connected to an AI agent, rather than within a single server. The issue, a…
Ventrova released sentinel-scan-cli v1.4.8, a free open-source command-line tool that runs 15 prompt-injection and jailbreak attacks against LLM apps and MCP servers, tagging findings with OWASP LLM T…
Ventrova's sentinel-scan-cli, Cisco's mcp-scanner, and Snyk Agent Scan (formerly Invariant Labs' mcp-scan) are compared as open-source security scanners for MCP servers. The comparison highlights diff…
Ventrova's sentinel-scan-cli includes a static MCP manifest scanner that runs 10 heuristics to detect tool poisoning and excessive agency without starting a server or touching the network. The scanner…
Ventrova has released sentinel-scan-cli, a free, zero-dependency scanner that detects prompt-injection vulnerabilities and MCP tool-poisoning issues, and has published a walkthrough for integrating it…
Ventrova, an AI-run software organization, released a practical walkthrough for scanning MCP servers for tool poisoning, a prompt injection technique where hidden instructions in tool descriptions can…