Defen.so

Most small teams ship without a Web Application Firewall in front of their app. They know they should. They put it on the backlog. Then the free trial ends, or a user reports a slow page, and the WAF ticket rots another quarter.

Or, install the SDK for your language directly:

npm install @defen.so/sdk-node # or: bun add / deno add

import { defenso } from '@defen.so/sdk-node' app.use(defenso({ token: process.env.DEFENSO_TOKEN }))

- Express:import { defenso } from '@defen.so/sdk-node/express'
- Fastify:import { defenso } from '@defen.so/sdk-node/fastify'
- Next.js middleware:import { defenso } from '@defen.so/sdk-node/next'

->withMiddleware(function ($middleware) { $middleware->append(\Defenso\Middleware\DefensoLaravelMiddleware::class); })

Symfony — register\Defenso\Middleware\DefensoSymfonyListeneras a kernel event listener.

- Fails open— if the Defen.so API is unreachable, your app keeps serving.
- Caches policy— 5-minute TTL, refreshed in background.
- Batches attack logs— sent asynchronously so the request path adds ~4 ms p50.
- Same verdict shape—{ action: 'allow' | 'block' | 'challenge', rule, category, reason }across every language.

Give Claude Code, Cursor, Windsurf, and VS Code real security tools. The Defen.so MCP scans domains, checks headers, guards code, lists uptime monitors, adds WAF rules, blocks IPs, and explains WAF verdicts — deterministic, auditable, safe to run inline. Scan output now also surfacesemail-security (SPF / DKIM / DMARC)and compliance-style findings alongside the usual header/TLS grade.

- Tabbed admin— Overview, Firewall & hardening, Scans, Rate limits, Uptime & alerts, and Activity log, each one click away; the tab you were on is remembered across reloads.
- Works with no account— local malware scan, file-integrity monitoring, login hardening, geo-blocking, and an activity log run entirely inside WordPress.
- One-click connect— link a Defen.so account to add managed WAF, the real-time attack log, uptime monitoring, and CVE lookups on top.

Playground — fire attacks at a live SDK-protected origin

- The SDK + version
- Framework + version
- A minimal reproduction

Security disclosures: mailinfo@defen.so— please don't file public issues for security bugs.

This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.

Create crafted UI components inspired by the best 21st.dev design engineers.

Bring agent evaluations, observability, and synthetic test set generation directly into your IDE for free with Galileo's new MCP server

An MCP server to help AI assistants to answer questions and generate AccelByte Extend SDK code more effectively .

MCP server for AI Diagram Maker — generate beautiful software engineering diagrams directly inside Cursor, Claude Desktop, Claude Code, or any MCP-compatible AI agent

ALAPI MCP Tools,Call hundreds of API interfaces via MCP

AI-powered SVG animation generator that transforms static files into animated SVG components using the Allyson platform

MCP server that gives AI assistants on-demand access to 1,500+ amCharts docs, ~300 code examples, and 1000+ class API references.

APIMatic MCP Server is used to validate OpenAPI specifications using APIMatic. The server processes OpenAPI files and returns validation summaries by leveraging APIMatic’s API.

One shared context layer for AI agents and humans — live API specs, DB schemas, and versioned contracts across repos so every agent and teammate works from the same source of truth.