SecureNow

ai.securenowPublished by securenow.aiOfficial publisherv8.12.4Updated Oct 26, 2026

Production security for Node.js apps: investigate live attacks, block IPs, tune detections.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

SecureNow gives an assistant production security for Node.js apps: investigating live attacks, blocking IPs and tuning detections, plus OpenTelemetry tracing…

What you can do
  • Investigate live attacks against a Node.js application
  • Block IP addresses and tune detection rules
  • Send traces and logs from Node.js and Next.js apps to SigNoz or any OTLP-compatible backend
  • Auto-instrument web frameworks, databases, HTTP, GraphQL and gRPC calls
  • Capture console logs with automatic trace-log correlation
  • Install and configure the instrumentation through an npm package or CLI init command
When to use it
Useful when you run a Node.js or Next.js service and want an assistant to look into ongoing attacks, block offending IPs or adjust detections, and when you want traces and logs shipped to a SigNoz or OTLP collector.
Requirements
A remote endpoint at api.securenow.ai with OAuth authentication, or the local npm package run with npx. Local setup needs Node.js, an application identifier in SECURENOW_APPID, and an OTLP collector endpoint in SECURENOW_INSTANCE (defaults to a hosted free-trial endpoint). Optional settings include SECURENOW_LOGGING_ENABLED and OTEL_EXPORTER_OTLP_HEADERS for authentication.
Before you install
OAuth is required for the remote endpoint. The instrumentation sends traces, logs and optionally request bodies to the configured collector, which defaults to a third-party hosted endpoint; set SECURENOW_INSTANCE to your own collector if data must stay in-house. Body capture (SECURENOW_CAPTURE_BODY) can record sensitive request data, so review SECURENOW_SENSITIVE_FIELDS redaction. Blocking IPs and tuning detections change production security behavior.

Installation

In SourceWeft

  1. Open SecureNow in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/ai.securenow%2Fsecurenow/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "securenow": {
      "type": "http",
      "url": "https://api.securenow.ai/mcp"
    }
  }
}

README

SecureNow

OpenTelemetry instrumentation for Node.js and Next.js applications - send traces and logs to SigNoz or any OTLP-compatible backend.

Official npm package: securenow

🚀 Quick Start

For Next.js Applications

The easiest way to add observability to Next.js!

bash
# Just install - setup is automatic!npm install securenow

🎉 The installer will automatically:

  • Detect your Next.js project
  • Create instrumentation.ts (or .js)
  • Create .env.local template

Just answer "Y" when prompted!

Then configure your .env.local:

bash
SECURENOW_APPID=my-nextjs-appSECURENOW_INSTANCE=http://your-signoz-server:4318

Alternative: Use the CLI command

bash
npx securenow init

Done! 🎉 See Next.js Complete Guide for details.

For Node.js Applications (Express, Fastify, NestJS, etc.)

Tracing Only
bash
# 1. Installnpm install securenow
# 2. Set environment variablesexport SECURENOW_APPID=my-appexport SECURENOW_INSTANCE=http://your-signoz-server:4318
# 3. Run with preloadNODE_OPTIONS="-r securenow/register" node app.js# orNODE_OPTIONS="-r securenow/register" npm start
Tracing + Logging (Recommended)
bash
# 1. Installnpm install securenow
# 2. Set environment variablesexport SECURENOW_APPID=my-appexport SECURENOW_INSTANCE=http://your-signoz-server:4318export SECURENOW_LOGGING_ENABLED=1
# 3. Run with preload (adds logging)NODE_OPTIONS="-r securenow/register -r securenow/console-instrumentation" node app.js
# Now all console.log/info/warn/error automatically go to SigNoz!

📦 Installation

bash
npm install securenow# oryarn add securenow# orpnpm add securenow

⚙️ Configuration

Environment Variables

bash
# Required: Your application identifierSECURENOW_APPID=my-app-name
# Optional: Your SigNoz/OTLP collector endpoint# Default: https://freetrial.securenow.ai:4318SECURENOW_INSTANCE=http://your-signoz-server:4318
# Optional: Enable LoggingSECURENOW_LOGGING_ENABLED=1                 # Enable automatic log collection
# Optional: Additional configurationSECURENOW_NO_UUID=1                         # Don't append UUID to service nameOTEL_LOG_LEVEL=info                         # debug|info|warn|errorSECURENOW_DISABLE_INSTRUMENTATIONS=fs,dns   # Disable specific instrumentationsOTEL_EXPORTER_OTLP_HEADERS="x-api-key=..."  # Authentication headers
# Optional: Request body capture (for debugging)SECURENOW_CAPTURE_BODY=1                    # Capture request bodies in tracesSECURENOW_MAX_BODY_SIZE=10240               # Max body size in bytesSECURENOW_SENSITIVE_FIELDS="field1,field2"  # Additional fields to redact

Legacy Environment Variables (still supported)

bash
export securenow=<API-KEY>export securenow_instance='http://<dedicated_instance>:4318'

🎯 Supported Frameworks & Libraries

SecureNow automatically instruments:

Web Frameworks

  • ✅ Next.js (App Router & Pages Router)
  • ✅ Express.js
  • ✅ Fastify
  • ✅ NestJS
  • ✅ Koa
  • ✅ Hapi

Databases

  • ✅ PostgreSQL
  • ✅ MySQL / MySQL2
  • ✅ MongoDB
  • ✅ Redis

Logging

  • ✅ Automatic console logging (console.log, info, warn, error)
  • ✅ Structured logging with OpenTelemetry
  • ✅ Automatic trace-log correlation
  • ✅ Works with all frameworks

Other

  • ✅ HTTP/HTTPS requests
  • ✅ GraphQL
  • ✅ gRPC
  • ✅ And many more via OpenTelemetry auto-instrumentation

📚 Documentation

Quick Starts

Complete Guides

Examples

🆘 Support

  • Website: securenow.ai
  • Issues: Report bugs and request features
  • Documentation: Full documentation and guides

📄 License

ISC

Source: README.md at commit 84e43ab

Tools

0
This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

1
  1. v8.12.4LatestOct 19, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts