--- title: Black Duck brings AI-powered vulnerability scanning into... description: Black Duck has released its Signal vulnerability scanning engine as an MCP server listed in the Claude Directory, letting developers using Claude Desktop scan... canonical: https://daily.dev/posts/black-duck-brings-ai-powered-vulnerability-scanning-into-claude-with-new-signal-integration-p0r5s7faa twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Black Duck brings AI-powered vulnerability scanning into Claude with new Signal integration | daily.dev og:description: Black Duck has released its Signal vulnerability scanning engine as an MCP server listed in the Claude Directory, letting developers using Claude Desktop scan... og:url: https://daily.dev/posts/black-duck-brings-ai-powered-vulnerability-scanning-into-claude-with-new-signal-integration-p0r5s7faa og:image: https://api.daily.dev/og/posts/p0r5s7FaA.png og:image:alt: Black Duck brings AI-powered vulnerability scanning into Claude with new Signal integration og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Black Duck brings AI-powered vulnerability scanning into Claude with new Signal integration **[IT Security Guru](https://daily.dev/sources/itsecurityguru)** · 3 min read · 3 upvotes · 1 comments ## Summary Black Duck has released its Signal vulnerability scanning engine as an MCP server listed in the Claude Directory, letting developers using Claude Desktop scan git diffs, files, or entire codebases for security flaws without leaving their AI workflow. Code is sent to Black Duck's cloud analysis service, and results come back as structured MCP resources that Claude can interpret to explain risks and suggest fixes in plain language. The move is part of a broader trend of AppSec vendors adapting their tools for AI-assisted coding workflows via MCP, following Anthropic opening up the protocol. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How does Black Duck's Signal vulnerability scanner work with Claude? Black Duck launched Signal as an MCP server listed in the Claude Directory, letting Claude Desktop users scan git diffs, individual files, or whole codebases for vulnerabilities without leaving their AI workflow. Code is sent to Black Duck's cloud-based analysis service, and results return as structured MCP resources that Claude reads to explain risks and suggest remediation in plain language. _Developers weighing AI-integrated security scanners can track how tools like Black Duck's Signal evolve on daily.dev._ ### What is the Model Context Protocol (MCP) used for in AI coding tools? MCP is an open standard that lets AI assistants like Claude call out to external services and pull structured data back into a conversation. It acts as connective tissue between AI assistants and specialist tools, letting vendors such as Black Duck expose capabilities like vulnerability scanning directly inside an AI coding workflow without developers switching tools. _Anyone building or adopting MCP integrations can follow the growing ecosystem on daily.dev._ ## Community discussion Top comments from developers on daily.dev. **@allinonetools** · 1 upvotes > Interesting direction for AppSec. Having vulnerability scanning directly inside the AI coding workflow could make security checks much easier to fit into everyday development. ## Similar posts on daily.dev - [Black Duck Launches Signal to Tackle the Security Risks of AI-Generated Code](https://daily.dev/posts/black-duck-launches-signal-to-tackle-the-security-risks-of-ai-generated-code-ah9ywyflb) · IT Security Guru · 0 upvotes · 0 comments - [GitHub builds an immune system for AI coding agents running on MCP](https://daily.dev/posts/github-builds-an-immune-system-for-ai-coding-agents-running-on-mcp-kbo1bxvmn) · The New Stack · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-coding](https://daily.dev/tags/ai-coding), [#mcp](https://daily.dev/tags/mcp), [#claude](https://daily.dev/tags/claude), [#appsec](https://daily.dev/tags/appsec) [View this post on daily.dev](https://daily.dev/posts/black-duck-brings-ai-powered-vulnerability-scanning-into-claude-with-new-signal-integration-p0r5s7faa) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Black Duck brings AI-powered vulnerability scanning into Claude with new Signal integration","url":"https://daily.dev/posts/black-duck-brings-ai-powered-vulnerability-scanning-into-claude-with-new-signal-integration-p0r5s7faa","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/black-duck-brings-ai-powered-vulnerability-scanning-into-claude-with-new-signal-integration-p0r5s7faa"},"datePublished":"2026-09-02T20:41:46.641Z","dateModified":"2026-09-02T22:25:55.767Z","description":"Black Duck has released its Signal vulnerability scanning engine as an MCP server listed in the Claude Directory, letting developers using Claude Desktop scan...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d69654821caaabe6090679cd70f60e4d?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d69654821caaabe6090679cd70f60e4d?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"IT Security Guru","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"IT Security Guru","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/ae9fe7d07c814192b35f86ad698fb374","url":"https://daily.dev/sources/itsecurityguru"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/black-duck-brings-ai-powered-vulnerability-scanning-into-claude-with-new-signal-integration-p0r5s7faa","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"security,ai-coding,mcp,claude,appsec","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"IT Security Guru","item":"https://daily.dev/sources/itsecurityguru"},{"@type":"ListItem","position":3,"name":"Black Duck brings AI-powered vulnerability scanning into Claude with new Signal integration"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/black-duck-brings-ai-powered-vulnerability-scanning-into-claude-with-new-signal-integration-p0r5s7faa","comment":[{"@type":"Comment","text":"Interesting direction for AppSec. Having vulnerability scanning directly inside the AI coding workflow could make security checks much easier to fit into everyday development.","datePublished":"2026-09-08T03:10:01.655Z","url":"https://daily.dev/posts/p0r5s7FaA#c-IG46mA3YO","author":{"@type":"Person","name":"AllInOneTools","url":"https://daily.dev/allinonetools","image":"https://media.daily.dev/image/upload/s--4ZT8QlF0--/f_auto/v1769790028/avatars/avatar_igzBsWloJeaegzm9bQltZ?_a=BAMAMiiu0"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1}}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/black-duck-brings-ai-powered-vulnerability-scanning-into-claude-with-new-signal-integration-p0r5s7faa#faq","mainEntity":[{"@type":"Question","name":"How does Black Duck's Signal vulnerability scanner work with Claude?","acceptedAnswer":{"@type":"Answer","text":"Black Duck launched Signal as an MCP server listed in the Claude Directory, letting Claude Desktop users scan git diffs, individual files, or whole codebases for vulnerabilities without leaving their AI workflow. Code is sent to Black Duck's cloud-based analysis service, and results return as structured MCP resources that Claude reads to explain risks and suggest remediation in plain language. Developers weighing AI-integrated security scanners can track how tools like Black Duck's Signal evolve on daily.dev."}},{"@type":"Question","name":"What is the Model Context Protocol (MCP) used for in AI coding tools?","acceptedAnswer":{"@type":"Answer","text":"MCP is an open standard that lets AI assistants like Claude call out to external services and pull structured data back into a conversation. It acts as connective tissue between AI assistants and specialist tools, letting vendors such as Black Duck expose capabilities like vulnerability scanning directly inside an AI coding workflow without developers switching tools. Anyone building or adopting MCP integrations can follow the growing ecosystem on daily.dev."}}]} ```