dns-rebinding
SSRF- and DNS-rebinding-safe outbound HTTP clients: exact egress authorities plus DNS-pinned httpx transports.
SSRF protection that connects to the address it validated.
Security scanner for MCP servers. Found and disclosed 6 vulnerabilities; 1 fix verified upstream (PR #4226).
Two-layer SSRF egress guard for Python's stdlib HTTP that survives DNS rebinding.
