diff --git a/README.md b/README.md
index c7f4b72d2..b069ae42a 100644
--- a/README.md
+++ b/README.md
@@ -2982,7 +2982,7 @@ Tools for conducting research, surveys, interviews, and data collection.
 
 ### 🔒 <a name="security"></a>Security
 
-- [nagameTW/mcp-server-malcolm](https://github.com/nagameTW/mcp-server-malcolm) 🐍 🏠 🍎 🪟 🐧 - The first MCP server for [Malcolm](https://malcolm.fyi), the open-source network traffic analysis suite (Zeek + Suricata + Arkime + OpenSearch + NetBox). Gives AI agents structured, threat-hunting access: search and aggregate traffic, discover fields, query Suricata alerts, browse Arkime sessions, and resolve NetBox assets. Read-only by default; opt-in, audited write classes for alerts, tagging, hunts, and PCAP upload. `pip install mcp-server-malcolm`
+- [nagameTW/mcp-server-malcolm](https://github.com/nagameTW/mcp-server-malcolm) [![nagameTW/mcp-server-malcolm MCP server](https://glama.ai/mcp/servers/nagameTW/mcp-server-malcolm/badges/score.svg)](https://glama.ai/mcp/servers/nagameTW/mcp-server-malcolm) 🐍 🏠 🍎 🪟 🐧 - The first MCP server for [Malcolm](https://malcolm.fyi), the open-source network traffic analysis suite (Zeek + Suricata + Arkime + OpenSearch + NetBox). Gives AI agents structured, threat-hunting access: search and aggregate traffic, discover fields, query Suricata alerts, browse Arkime sessions, and resolve NetBox assets. Read-only by default; opt-in, audited write classes for alerts, tagging, hunts, and PCAP upload. `pip install mcp-server-malcolm`
 - [chasdaddy/basescope](https://github.com/chasdaddy/basescope) [![chasdaddy/basescope MCP server](https://glama.ai/mcp/servers/chasdaddy/basescope/badges/score.svg)](https://glama.ai/mcp/servers/chasdaddy/basescope) 📇 ☁️ - The read-only safety layer for onchain AI agents. 13 read-only tools on Base + EVM: token/contract safety (honeypot & rug-pull checks cross-referenced across GoPlus + honeypot.is), risky-approval detection, verified-source lookup, balances, ENS + Basenames, gas, and prices. No private keys, no required API keys. `npx -y basescope`
 - [moxno/privacyscrubber-mcp](https://github.com/moxno/privacyscrubber-mcp) [![moxno/privacyscrubber-mcp MCP server](https://glama.ai/mcp/servers/moxno/privacyscrubber-mcp/badges/score.svg)](https://glama.ai/mcp/servers/moxno/privacyscrubber-mcp) 📇 🏠 - Zero-trust local PII and secrets masking server for Cursor, Windsurf, and Claude Desktop. `npx pii-masking-run`
 - [askalf/truecopy](https://github.com/askalf/truecopy) [![askalf/truecopy MCP server](https://glama.ai/mcp/servers/askalf/truecopy/badges/score.svg)](https://glama.ai/mcp/servers/askalf/truecopy) 📇 🏠 🍎 🪟 🐧 - Supply-chain gate for agent skills and MCP servers — scans tool definitions for poisoned instructions, pins vetted servers by content hash in a committed lock, and verifies drift in CI; the bundled truecopy-mcp proxy exposes only pinned, unmodified tools from a live server.