Automatically guards projects against known security vulnerabilities in dependencies using the OSV.dev database.
Sponsored
Guardian is a vigilant security companion that automatically guards your projects against vulnerabilities. It operates as an MCP (Model Context Protocol) server, leveraging the OSV.dev database to scan project dependencies for known security issues. Seamlessly integrating with popular IDEs like Cursor, VS Code, and Claude Desktop, Guardian provides real-time alerts and detailed reports, ensuring your development workflow remains secure and proactive.
Key Features
01Auto-trigger support via IDE rules (on install, commit, build)
02Real-time alerts for CRITICAL and HIGH severity issues
031 GitHub stars
04Detailed reports with remediation guidance and CVE links
05Three flexible scan modes: full, summary, and critical-high-only
06Automatic vulnerability scanning for npm and Composer dependencies
Use Cases
01Proactively monitoring project dependencies for critical security issues during development
02Implementing automated vulnerability checks during CI/CD processes or pre-commit hooks
03Performing manual security audits and comprehensive vulnerability reviews within your IDE
