Security scanner for Capacitor apps - detect vulnerabilities, hardcoded secrets, and security misconfigurations

A powerful interactive CLI tool that scans your codebase for hardcoded secrets, API keys, passwords, and private keys before they reach your Git history.

Securify - Enterprise Hardcoded Secrets, Leaks & CVE Dependency Security Scanner

ESLint plugin for JWT security — detects algorithm confusion (CVE-2022-23540), alg:none, weak or hardcoded secrets, and decode-without-verify.

Primitive validator for detecting hardcoded secrets and sensitive patterns in code

Detect hardcoded secrets in source and config, reporting masked previews and never the values themselves.

SIC free code scanner — read-only static analysis for hardcoded secrets, dangerous patterns, and dependency CVEs. Zero runtime dependencies.

Security scanner for Capacitor apps - detect vulnerabilities, hardcoded secrets, and security misconfigurations

Free offline CLI that scans your local repo for hardcoded secrets and risky AI-generated code before you ship.

CLI security scanner for local Agent/SKILL config files: remote upload, hardcoded secrets, suspicious URLs, dangerous commands

Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.

Deterministic source scanner — hardcoded secrets and insecure patterns (CWE) with AST/taint analysis. No AI, no network, no source upload. CLI + LSP for editors and CI.

Correctover Security Scanner — CCS audit for MCP configurations AND published JS bundles/npm packages. Detects hardcoded secrets, RCE, SSRF, credential hijacking against OWASP AISVS 1.0.

Security scanner for agent skill files - detects command injection, unsafe file operations, hardcoded secrets, and code injection risks

GitHub-native guardrails for AI-generated code. ESLint plugin and GitHub Action for detecting async reliability issues, floating promises, empty catch blocks, hardcoded secrets, SQL injection, and more. SARIF-based GitHub Code Scanning integration with PR

MCP server: security scanner for AI-generated code: the agent scans its own code/diff before committing. Detects injection, SSRF, hardcoded secrets, weak crypto, unsafe deserialization, TLS-off, XSS. Deterministic, free, no LLM.

Local-first security check MCP server for AI coding agents — finds hardcoded secrets, exposed .env files, secrets in git history, and vulnerable dependencies in your workspace, entirely on your machine.

MCP server that audits Make.com (Integromat) scenario blueprints before you import them — hardcoded secrets, dangling module references, unfiltered routes, missing error handling.

Security scanner for AI apps. Detect hardcoded secrets, PII leaks, and exposed routes.

CLI tool to scan for hardcoded secrets, API keys, tokens, and passwords