Alternatives to GhidraMCP

3 editor-selected alternatives · GhidraMCP overview →

source: tools.alternatives · stored order · active records only; review scores are annotations and never change membership or order

A directional evidence panel appears only when the substitute rationale, trade-offs, sources, and verification date have been recorded. Older selections without that panel remain visible but are unclassified under the new evidence contract.

Snyk

86/100freemiumexplicit relation

Snyk is the leading developer security platform providing continuous scanning for vulnerabilities in code (SAST), open-source dependencies (SCA), container images, and infrastructure as code. Integrates directly into IDEs, Git repositories, CI/CD pipelines, and container registries. Features AI-powered fix suggestions, license compliance checking, and real-time vulnerability database. Free for individual developers with paid plans for teams. Supports 30+ programming languages.

Snyk provides a Free tier with basic test limits across SCA, SAST, Container, and IaC security. The Team plan costs $25/month per contributing developer for increased tests and Jira integration. The Ignite plan is $1,260/year per developer for unlimited scans, while Enterprise offers custom governance, SSO, and compliance.Review →

Aikido Security

86/100freemiumexplicit relation

Aikido Security is an all-in-one AppSec platform unifying SAST, DAST, SCA, CSPM, secrets detection, container scanning, IaC analysis, and runtime protection in a single developer-friendly dashboard. Cuts false positive noise by 95% through reachability analysis that evaluates vulnerabilities in actual deployment context. Features AI AutoFix for one-click remediation, CI/CD gating, and AI-powered pentesting agents. Trusted by 50,000+ organizations. Supports 50+ programming languages.

Aikido Security provides a free Developer tier for up to 2 users and 10 repositories. Paid tiers are structured as flat monthly packages: Basic at $350/mo (up to 10 users), Pro at $700/mo, and Advanced at $1,050/mo, with optional AI AutoFix credits and add-on pentesting.Review →

Falco

open sourceexplicit relation

Falco is a CNCF graduated open-source runtime security tool that detects unexpected behavior and threats across containers, Kubernetes, and cloud workloads in real time. Originally created by Sysdig, Falco monitors Linux kernel syscalls using eBPF and applies customizable detection rules to alert on malicious activity like container escapes, cryptojacking, unauthorized file access, and anomalous network connections. It supports 50+ alert output channels including SIEM integration.

Free and 100% open source under the Apache-2.0 license as a CNCF Graduated project. Falco has no software licensing costs, paid feature gates, or node fees; users deploy it freely across self-hosted Linux nodes and Kubernetes clusters.

Open-source GhidraMCP alternatives

Falco — see all open-source developer tools.

Free GhidraMCP alternatives

Snyk, Aikido Security offer a free plan or free tier.

More MCP Servers tools

same category, not editor-selected alternatives — see how GhidraMCP compares →

OpenLITOpenLIT is an open-source AI engineering platform that provides OpenTelemetry-native observability for LLM applications. It combines distributed tracing, evaluation, prompt management, a secrets vault, and GPU telemetry in a single self-hostable stack. With 50+ integrations across LLM providers and frameworks, it lets teams monitor AI applications using their existing observability backends like Grafana, Datadog, or Jaeger.CiliumCilium is a CNCF Graduated, Apache-2.0 project for Kubernetes networking, security, and observability using eBPF. It can replace kube-proxy, enforce identity-aware L3-L7 network policies, and add Hubble flow observability plus Tetragon runtime-security signals. Current source checks support GKE Dataplane V2 using Cilium/eBPF and Azure CNI Powered by Cilium for AKS.MCP InspectorMCP Inspector is the official interactive developer tool from the Model Context Protocol team for testing, debugging, and validating MCP servers. It provides a visual interface to inspect available tools, test transport configurations, export configs for different clients, and verify protocol compliance during MCP server development.MCP-ScanMCP-Scan is a security tool that scans MCP servers for vulnerabilities including tool poisoning, prompt injection, cross-origin escalation, and rug pull attacks. Acquired by Snyk in 2026, it is the first dedicated security scanner for the MCP ecosystem. It analyzes tool descriptions, permissions, and behavior patterns to detect malicious or compromised MCP servers before they can exploit AI agents.PangolinIdentity-based remote access platform built on WireGuard that combines reverse proxy and VPN capabilities. Pangolin supports clientless browser access for web apps and client-based private-resource access across macOS, iOS, Windows, Linux, and Android, with zero-trust rules, peer-to-peer tunnels, automatic SSL, SSO/OIDC options, and cloud or self-hosted deployment.GitHub MCP ServerGitHub MCP Server is the official Model Context Protocol server from GitHub that connects AI assistants to repositories, issues, pull requests, workflows, and code search. It exposes 100+ operations with toolset filtering, permission scoping, and audit logging, available in both remote-hosted and self-hosted Docker deployment modes.MCP RegistryThe official, community-run registry for discovering and publishing Model Context Protocol (MCP) servers — an open index that MCP clients read to find available servers.Context7Context7 is an MCP server developed by Upstash that injects up-to-date, version-specific documentation directly into AI code editors and coding assistants. By typing 'use context7' in prompts, developers get accurate library documentation instead of hallucinated or outdated API references. It pulls from official source documentation and serves it through the Model Context Protocol, solving the common problem of LLMs generating code with incorrect or nonexistent API calls.chrome-devtools-mcpchrome-devtools-mcp is the Chrome DevTools team's official MCP server that lets coding agents control and inspect a live Chrome browser with first-party Chrome DevTools Protocol fidelity. It exposes Network inspection, Performance traces, Lighthouse audits, console output, and structured DOM snapshots as typed MCP tools, so agents can debug real pages and ship reliable web performance investigations without resorting to brittle DOM scraping.

FAQ

Which GhidraMCP alternative is listed first?

Snyk is first in the editor-selected list of 3 GhidraMCP alternatives and carries an editorial review score of 86/100. The stored order is editorial; review scores do not determine membership or position.

Are there open-source GhidraMCP alternatives?

Yes — Falco are open source.

Are there free GhidraMCP alternatives?

Yes — Snyk, Aikido Security offer a free plan or free tier.