What they built

Domain Expansion — MCP-powered API Surface Security Analyzer

Domain Expansion is an automated API Surface Security Analyzer built on the Model Context Protocol (MCP). It continuously scans API logs, traffic, and OpenAPI specifications to detect security gaps, authorization mismatches, shadow endpoints, data leakage, and log injection vulnerabilities. Designed for modern DevOps and AppSec teams, it bridges the gap between raw telemetry and security remediation by serving structured findings, interactive topology graphs, and evidence viewers directly to AI agents. Domain Expansion transforms routine API security audits into an automated, real-time workflow that keeps enterprise applications secure by default.