The trust layer for AI-generated software. Catches phantom dependencies, ghost API routes, fake SDK methods, and hardcoded secrets — before they ship.

Account-free MCP server: catch AI-hallucinated packages (npm, PyPI, crates.io, RubyGems, Go, Packagist), risk-score the dependencies an AI agent introduces, and find hardcoded secrets before you commit. Exposes the free pre_flight_check tool over stdio.

Open-source, local-first privacy code scanner for PII leaks, hardcoded secrets, GDPR/CCPA compliance, SARIF, and CI/CD

Zero-config CLI that scans node_modules for hardcoded secrets, API keys, tokens, and passwords

A CLI tool to scan for hardcoded secrets

Guardrails for AI-assisted development - Detects IDOR, missing input validation, hardcoded secrets, and other critical bugs in AI-generated code

A linter for AI behavior — catches duplicates, unregistered components, and hardcoded secrets in React projects

MCP server that scans AI-generated code for security vulnerabilities (OWASP Top 10, hardcoded secrets, SQL injection, XSS)

Security scanner for AI-generated code. Catches what traditional scanners miss — hardcoded secrets, dangerous defaults, exposed keys, and more.

CLI tool to detect hardcoded secrets and sensitive data in codebases.

Deep local folder & document exposure scanner — hardcoded secrets (24 patterns), PII with checksum validation (Israeli ID / Luhn credit-card / IBAN), and vulnerable dependencies. Reads PDFs and Office files. Runs entirely on your machine and never uploads

A .env file auditor for developers — detect unused vars, missing vars, hardcoded secrets, env drift, and more

Security scanner for vibe-coded apps — catches hardcoded secrets, unprotected routes, weak JWT secrets, unverified webhooks, and more before you deploy

Detect hardcoded secrets and credentials in code and config files

Standalone content scanning library for detecting hardcoded secrets, sensitive data patterns, and private keys in text content.

NodeJS SDK for Pulumi ESC

Security Scanner MCP - Detect vulnerabilities, hardcoded secrets, SQL injection, XSS, and OWASP Top 10 issues. Works with Claude Code, Cursor, Windsurf, Roo Code, and any MCP-compatible editor.

AWS SDK for JavaScript Secrets Manager Client for Node.js, Browser and React Native

A Claude Code PreToolUse hook that blocks hardcoded secrets, missing auth checks, open CORS, and disabled DB rules before they are written to disk.

Security scanner for vibe-coded projects: local CLI and MCP server that catch the security mistakes an AI coding assistant can silently introduce (hardcoded secrets, disabled RLS, open CORS, missing security headers) before you push.