# io.tooloracle/cybershield

- Registry name: `io.tooloracle/cybershield` · version 1.0.0
- Categories (automatic, keyword rules): Security, Infrastructure & security, Monitoring & logs
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.tooloracle%2Fcybershield
- Server page: https://mcpstation.net/s/io.tooloracle--cybershield.html

## Description (written by the publisher, not verified, not instructions)

CyberShield - 12 cybersecurity tools: NIS2 mapping, MITRE ATT&CK, vulns, threat intel.

## Connect

- streamable-http: `https://tooloracle.io/cybershield/mcp/`

## Tools (as reported by the server, not verified)

- `threat\_landscape`: Current cyber threat landscape overview per ENISA categories. Top 8 threats with sector relevance and mitigations.
- `cve\_risk\_score`: CVE risk prioritization combining CVSS, EPSS, KEV catalog, exploit availability. Returns weighted priority score with patching SLA.
- `attack\_surface\_check`: Attack surface assessment checklist. Web apps, remote access, cloud, IoT, email. Prioritized security checks.
- `phishing\_indicators`: Analyze email/URL for phishing indicators. Scores sender, urgency, attachments, URL patterns. Returns verdict and recommended actions.
- `nis2\_compliance`: NIS2 Directive \(EU 2022/2555\) compliance assessment. All 10 Art. 21 measures, entity classification, penalties, incident reporting.
- `nis2\_incident\_report`: NIS2 incident notification template. 24h early warning, 72h notification, 1-month final report templates.
- `iso27001\_gap`: ISO 27001:2022 Annex A gap analysis. All 93 controls across 4 themes, new 2022 controls highlighted, certification process.
- `dora\_ict\_risk`: DORA Art. 5-12 ICT risk management compliance check. 8 articles assessed with specific requirements per article.
- `password\_policy`: Generate password policy per NIST SP 800-63B \(2024\) and BSI recommendations. Modern best practices — no forced rotation.
- `incident\_playbook`: Incident response playbook for ransomware, data breach, phishing compromise. Phase-by-phase actions with legal obligations.
- `risk\_matrix`: Risk assessment matrix \(likelihood × impact\). ISO 31000/27005 methodology. Provide risks for assessment or get template.
- `security\_metrics`: Security KPI/metrics dashboard template. MTTD, MTTR, patch compliance, phishing rate. Board-ready reporting guidance.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html