diff --git a/README.md b/README.md
index f7b62e627..dd1dd87d3 100644
--- a/README.md
+++ b/README.md
@@ -3675,6 +3675,7 @@ Tools for conducting research, surveys, interviews, and data collection.
 - [smeet666/mcp-supertoinette](https://github.com/smeet666/mcp-supertoinette) [![smeet666/mcp-supertoinette MCP server](https://glama.ai/mcp/servers/smeet666/mcp-supertoinette/badges/score.svg)](https://glama.ai/mcp/servers/smeet666/mcp-supertoinette) 📇 ☁️ 🍎 🪟 🐧 - Read Supertoinette's French recipes: ingredients with the quantity separated from the line, steps, difficulty, cost level, resting time, and the five wines the site ranks for a dish. Rescales any recipe to a number of people, saying on each line whether the arithmetic landed exactly. No API key. `npx -y mcp-supertoinette`
 ### 🔒 <a name="security"></a>Security
 
+- [26zl/cybersec-toolkit](https://github.com/26zl/cybersec-toolkit) [![26zl/cybersec-toolkit MCP server](https://glama.ai/mcp/servers/26zl/cybersec-toolkit/badges/score.svg)](https://glama.ai/mcp/servers/26zl/cybersec-toolkit) 🐍 🏠 🐧 - One command installs 670+ security tools; an authorization-gated MCP server lets AI clients discover and run them for CTF, pentest, bug bounty, and DFIR.
 - [AIops-tools/Compliance-AIops](https://github.com/AIops-tools/Compliance-AIops) [![AIops-tools/Compliance-AIops MCP server](https://glama.ai/mcp/servers/AIops-tools/Compliance-AIops/badges/score.svg)](https://glama.ai/mcp/servers/AIops-tools/Compliance-AIops) 🐍 🏠 - A meta-tool that reads other AIops tools' audit trails and seals framework-mapped (HIPAA/PCI-DSS/SOC 2/GDPR) hash-chained evidence bundles — deterministic, offline, and tamper-evident (19 tools) with unbypassable audit logging (MCP + CLI), budget/runaway guards.
 - [dtkmn/mcp-zap-server](https://github.com/dtkmn/mcp-zap-server) [![dtkmn/mcp-zap-server MCP server](https://glama.ai/mcp/servers/dtkmn/mcp-zap-server/badges/score.svg)](https://glama.ai/mcp/servers/dtkmn/mcp-zap-server) ☕ 🏠 - Self-hosted OWASP ZAP integration for MCP clients, with guided security scans, findings summaries, and report generation.
 - [felixpg13-glitch/spendshield](https://github.com/felixpg13-glitch/spendshield) [![felixpg13-glitch/spendshield MCP server](https://glama.ai/mcp/servers/felixpg13-glitch/spendshield/badges/score.svg)](https://glama.ai/mcp/servers/felixpg13-glitch/spendshield) 🐍 🏠 - Payment guardrails for AI agents: spend-capped digital identity (KYA), dry-run / budget / amount-limit / approval gates, prompt-injection defense (new recipients & large amounts require human sign-off), AES-encrypted secret vault with audited access, full audit trail. Python library + stdio MCP server. `pip install spendshield`