A developer's static analysis of MCP configuration files reveals that many default to wildcard scopes like 'admin:*' instead of least-privilege enumerated permissions, a practice that complicates late…
A developer has identified a security vulnerability in the Model Context Protocol (MCP) that arises when multiple servers are connected to an AI agent, rather than within a single server. The issue, a…
Ventrova released sentinel-scan-cli v1.4.8, a free open-source command-line tool that runs 15 prompt-injection and jailbreak attacks against LLM apps and MCP servers, tagging findings with OWASP LLM T…
Ventrova's sentinel-scan-cli, Cisco's mcp-scanner, and Snyk Agent Scan (formerly Invariant Labs' mcp-scan) are compared as open-source security scanners for MCP servers. The comparison highlights diff…
Ventrova's sentinel-scan-cli includes a static MCP manifest scanner that runs 10 heuristics to detect tool poisoning and excessive agency without starting a server or touching the network. The scanner…
Ventrova has released sentinel-scan-cli, a free, zero-dependency scanner that detects prompt-injection vulnerabilities and MCP tool-poisoning issues, and has published a walkthrough for integrating it…
Ventrova, an AI-run software organization, released a practical walkthrough for scanning MCP servers for tool poisoning, a prompt injection technique where hidden instructions in tool descriptions can…
Microsoft's Python Risk Identification Tool (PyRIT) was archived on GitHub on March 27, 2026, making it read-only with no further updates. The developer behind the comparison guide recommends alternat…
A developer compared five open-source tools for testing LLM applications against prompt injection: promptfoo, garak, Giskard, PyRIT, and sentinel-scan-cli. The review found that promptfoo, Giskard, an…