ThreatCorraling

Version 1.0.1.9c16b59

ThreatCorralling is an intelligent, extensible Vulnerability Correlation Agent and Model Context Protocol (MCP) server. It bridges the gap between disparate security tools by analyzing scoped assets across platforms like Checkmarx SAST and Tenable WAS. Powered by LLMs (supporting both Gemini and local Ollama deployments), ThreatCorralling automates the arduous task of correlating findings, determining reachability, mapping compliance controls (SOC2, ISO27001), and generating actionable, tech-stack-specific remediation and regression testing patterns. It offers a "best of both worlds" architecture, functioning as a standalone Streamlit web application for interactive analysis, or as a background MCP server ready to plug into modern AI IDEs and clients like Cursor and Claude Desktop.

<!-- TODO Start -->

Code TODOs

<!-- TODO End -->