Mlab.sh Mlab.sh
v1.20.1
Platform
Free Tools Ecosystem Pricing Blog Programs
Technical
CLI & Binaries Developer API Integrations MCP Integration Changelog
Learn
Cheat Sheets Comparisons Glossary
Support
Help Center Contact sales Partners
Terms · Privacy · Sales
tprm.mlab.sh
Third-party risk management
Pricing · Docs · Changelog
risk.mlab.sh
EBIOS Risk Manager platform
Features · Methodology · Changelog
ir.mlab.sh
Self-hosted incident response
Pricing · Docs · Changelog
hunt.mlab.sh
Threat hunting with Sigma & YARA
actors.mlab.sh
Threat actor database, APTs, groups & TTPs
vuln.mlab.sh
Attack surface & CVE tracking
academy.mlab.sh
Cybersecurity training & courses
kids.mlab.sh
Cyber education for kids
Contact
Sign up
Navigation
Terms Privacy Contact
Integrations

Bring mlab.sh into your tools

Your assistant, your IDE, your CI and your workflows, plus the open-source scanners built by the mlab.sh team. Every entry links to its repository, with setup instructions.

Integrations
18
Categories
8
Source
github.com/mlab-sh
01

AI assistants

Ask your assistant about an indicator and get mlab.sh answers without leaving the conversation.

MCP server
Connect Claude, Cursor or any MCP client to mlab.sh: IOC lookups, domain scans, CVEs and threat actors from your assistant.
MCPRemote
Claude Code plugins
Ready-made Claude Code workflows for SOC and DFIR teams: IOC triage, SBOM audits and supply-chain reviews.
Claude CodePlugins
02

IDE

Known vulnerabilities in your dependencies, flagged where you write the code.

VS Code extension
Scans lockfiles for known CVEs with EPSS and KEV status, lists findings in the Problems panel, shows CVE details on hover and looks up IOCs.
VS CodeOpen VSX
 Also on Open VSX · Source
JetBrains plugin
The same lockfile scanning inside IntelliJ IDEA, PyCharm, GoLand, WebStorm and RustRover, with findings inline.
JetBrains
 Source · JetBrains
03

CI/CD

Stop a vulnerable dependency before it is merged.

GitHub Action
Checks every dependency on each push or pull request, writes a job summary and fails the build above your severity threshold.
GitHub Actions
 Source
04

Automation

Plug mlab.sh into the workflows your team already runs.

n8n node
Scans, CVE intelligence and threat-actor data as a node in your n8n workflows.
n8nnpm
 Source
05

Browser

Pivot from any web page to an investigation.

mlab.sh INTEL extension
Spots domains and IPs on any page, defanged ones included, and opens them in mlab.sh in one click.
ChromeFirefox
 Also on Firefox Add-ons · Source
06

Command line

Everything mlab.sh does, scriptable.

mlab CLI
Scan domains, IPs, files and URLs, pull IOCs out of text, gate CI on vulnerable dependencies and search CVEs and threat actors. Terminal or JSON output.
RustSingle binary
07

Infrastructure audit

Read-only command-line audits of an account or a device: graded findings, snapshots, diffs of what changed and CVEs matched to the installed version. No telemetry.

In development. These audits are usable today, but checks and output may still change between releases.
Cloudflare
DNS, edge posture, TLS, Workers, Zero Trust, logging and IAM of a Cloudflare account.
RustRead-only
Scaleway
IAM weaknesses, internet exposure, plaintext credentials and published CVEs across a Scaleway account.
RustRead-only
Proxmox VE
Access control, firewall, guest isolation, backups and patch level of a Proxmox cluster.
RustRead-only
UniFi
Segmentation, firewall, Wi-Fi and exposure of a UniFi console.
RustRead-only
MikroTik
Exposure, firewall and accounts of a RouterOS device, with CVEs matched to its exact version.
RustRead-only
08

Open-source security tools

Standalone scanners from the mlab.sh team. They run offline and need no account.

postmortem
Supply-chain scanner: malicious install code, typosquats and shady provenance across your dependencies and OS packages.
RustCLI
mcpwn
Static security scanner for MCP servers: flags the tools, prompts and resources that can turn an agent against its user.
RustCLI
apex
Static analysis of Android and iOS packages (.apk, .aab, .xapk, .ipa): 15 analyzers and a weighted score.
RustCLI
assay
Offline scanner for ML model files (safetensors, GGUF, PyTorch pickle): checks provenance and integrity before you load a model.
RustOffline
k3sec
Runtime security for k3s clusters: one real-time stream of what happens in the cluster.
RustBeta

All product names, logos and brands shown on this page are the property of their respective owners and are used only to identify the products each integration works with. Their use does not imply any affiliation with, sponsorship by, endorsement by or partnership with those owners, unless stated otherwise in writing. Claude is a trademark of Anthropic, PBC. JetBrains and IntelliJ IDEA are trademarks of JetBrains s.r.o. Visual Studio Code is a trademark of Microsoft Corporation. GitHub is a trademark of GitHub, Inc. n8n is a trademark of n8n GmbH. Cloudflare is a trademark of Cloudflare, Inc. Scaleway is a trademark of Scaleway SAS. Proxmox is a trademark of Proxmox Server Solutions GmbH. UniFi and Ubiquiti are trademarks of Ubiquiti Inc. MikroTik and RouterOS are trademarks of SIA Mikrotikls. All other trademarks belong to their respective owners.