secure-code-review

Secure Code Review AI Agent (SeCoRA) - AI SAST

A terminal interactive game designed to train yourself to identify insecure coding practices.

Claude Code skill: security + code review in one pass. Evidence-gated findings, invariant-based hunting, deep multi-agent audit engine, read-only.

AppSec interview questions and study guides covering web, mobile, cloud, DevSecOps, and secure code review.

Defensive AI security audit skill for Claude and Codex. Reviews codebases and web apps for OWASP Top 10, auth and authorization flaws, business logic bugs, tenant isolation gaps, insecure defaults, secret leaks, and ORM or N+1 query issues, then produces clear remediation guidance.

Portable defensive application security and AI-agent security skill for Claude Code, Codex, Gemini, and ChatGPT. Covers OWASP, secure design, secure code review, MCP security, prompt injection, threat modeling, incident response, and hardening.

Cross-platform AI agent skill for threat-model-driven AppSec reviews in Claude Code, Cursor, and OpenAI Codex. Maps attack surfaces, verifies findings independently, validates coverage, scores with CVSS 4.0, and exports SARIF.

Secure code review internship task: reviewing a vulnerable Python login/file-upload app, documenting findings, and shipping the fixed version.

Windows secure code review tool by Verse. SAST + on-device AI analysis for C/C++, Python, JavaScript, and .NET source projects you own or are authorized to review - runs entirely on your own machine.

Developer behind VirtualSpace AppSec - a Windows secure code review tool by Verse (NL, KVK 88114171) that runs entirely on your own machine.

Local MCP server that helps coding agents run defensive, remediation-focused secure code review of source repositories.

Real-time code analysis that detects cross-file semantic errors, type inconsistencies, array bound violations, and function signature drift while you type, before files are saved, without external security APIs.

CosmoGrepperAI is a highly polished, open-source application security scanner designed to dramatically outperform raw static analysis tools.

Online admission and seat-allocation system for the University of Kalamoon. ASP.NET Core MVC + EF Core + SQL Server graduation project (2022), with a 2026 security review.

University job board reviewed as unfamiliar code: twelve findings including an authentication bypass via a client-supplied header, each fixed and held by a regression test.

Most AI security tools try to find more. SecHelix tries to prove itself wrong: every candidate finding goes to an independent verifier whose only job is to disprove it. Open-source AppSec agent for Claude Code, Codex and Copilot.

Easy-to-use, customizable, high-quality secure code review skills for AI agents.

AI agent skill for Claude Code & Kiro: enterprise-grade, read-only SAST review of multi-repo codebases — line-level evidence, exploit chains, OWASP/CWE/NIST/GDPR/DPDPA/SOC 2/ISO 27001 mapping, computed scores and HTML reports.

VS Code extension prototype that uses adversarial LLM review to identify insecure code patterns, propose hardened alternatives, and apply approved local code changes.

Static code scanner (SAST linter) that finds insecure usage of Jev / TypeSafe guardrails in Python. Not a guardrail itself — build-time analysis, offline, no API key.