Is Cisco's mcp-scanner free?
Yes. mcp-scanner is published under Apache 2.0. The AI Defense platform is a separate commercial product.
Beam vs CISCO
Beam vs AI Defense
Cisco offers AI Defense as an enterprise platform, built partly on its Robust Intelligence acquisition, and separately publishes mcp-scanner as a free Apache-2.0 MCP scanner. The scanner overlaps directly with part of what Beam does, at no cost. Beam's difference is pairing scanning with a local activity timeline, and covering skill files too.
Beam vs AI Defense, side by side
Details below are drawn from a September 2026 review of the AI agent security market. Some figures are vendor-sourced or analyst estimates, and this is a fast-moving space — check with each vendor before you buy. Composio details come from its own pricing and documentation pages as of October 2026.
| Beam | AI Defense (Cisco) | |
|---|---|---|
| What it is | Local-first activity monitor, policy enforcement, and pre-run scanner for AI coding agents, with a Sentinel browser extension for AI chats. | Enterprise AI security from Cisco, alongside the open-source mcp-scanner. |
| Monitoring | Shell commands, file changes, tool calls, network endpoints and browser actions from harnesses such as Claude Code, Codex and Cursor, plus Beam Sentinel checks on supported AI chat sites before send. Normalised into local NDJSON with risk flags and evidence attached. | Enterprise AI defence, built partly on Cisco's Robust Intelligence acquisition. |
| Skill / MCP scanning | Yes. SKILL.md files and MCP configurations are scanned before you run them, using 11 heuristic patterns plus an MCP version-pin check. Workspace admins can also block an MCP server for the org or one user. | Yes, through the separate open-source mcp-scanner, licensed Apache 2.0. |
| Blocking / enforcement | Yes. Workspace owners and admins set observe, advisory, or enforce policy. Enforce denies matching tool calls on Claude Code and Codex PreToolUse hooks. The Sentinel Chrome extension pauses or blocks high-risk browser sends and can hold a send after redacting live secrets. | Protection is part of the AI Defense platform. |
| Individual use | Free for up to 3 people, and Pro for one person at $8/month. Team workspaces add owner/admin roles, org baselines, stricter member overrides and a control plane. | mcp-scanner is free and open source for anyone. |
| Deployment | Local collector plus a workspace dashboard. Apple and Windows MDM. Sentinel Chrome extension for browser AI chats. Licensed self-hosted control plane for teams that need it on their own infrastructure. | Enterprise deployment; mcp-scanner runs standalone. |
| Source / licence | AGPL-3.0 for the local CLI and collector; the multi-user control plane is proprietary. | Commercial platform; the separate mcp-scanner is Apache 2.0. |
| Pricing | Free for up to 3 people. Pro $8/month for one person. Team $20 per developer and $5 per browser seat a month, billed yearly. | Enterprise, no public price. mcp-scanner is free. |
AI Defense in numbers
As reported in our source research. Some figures are estimates.
- Built partly on
- Cisco's Robust Intelligence acquisition
- Open-source scanner
- mcp-scanner, Apache 2.0
Where AI Defense does more
- Publishes a free, Apache-2.0 MCP scanner alongside a commercial platform, so the scanning layer costs nothing.
- Enterprise AI defence with Cisco's distribution and the Robust Intelligence technology behind it.
- Protection at platform level rather than observation alone.
Where Beam differs
- Beam combines MCP and skill scanning with a running activity timeline in one local tool.
- Beam covers skill files as well as MCP configurations in the same scan.
- Beam requires no platform relationship to start.
Beam’s current gaps
- Enforce is hook-based: a native deny is wired for Claude Code and Codex PreToolUse. Cursor, Copilot CLI and Gemini currently get a deny note, not a verified block.
- Missing, unreadable or expired cached policy allows the action. Beam is not a fail-closed kernel sandbox or an in-silicon watchdog.
- Scanning is heuristic pattern matching. It produces false positives, misses novel phrasing, and is not a guarantee of safety.
- There is no SOC 2 report and no default SIEM forwarder. Kernel isolation like OpenShell remains a different layer.
Which one fits
If you just want to scan MCP servers, Cisco's mcp-scanner is free and open source and there is little reason not to use it. Beam is worth a look when you also want a record of what the agent actually did afterwards.
FAQ
What is Cisco AI Defense built on?
It draws partly on Cisco's acquisition of Robust Intelligence.
Does Beam's scanner do anything mcp-scanner does not?
Beam scans skill files as well as MCP configurations and shows results alongside a local activity timeline. Its 11 heuristic patterns are pattern matching, not semantic analysis, and will produce false positives.
See how Beam works
Beam is an early, local-first prototype. Read what it actually does today before comparing it further.