High-performance Static Application Security Testing (SAST) library for detecting security vulnerabilities through taint analysis

The open source taint analysis engine for the AI era.

Datadog IAST tant tracking support for NodeJS

Deterministic source scanner — hardcoded secrets and insecure patterns (CWE) with AST/taint analysis. No AI, no network, no source upload. CLI + LSP for editors and CI.

Framework-agnostic static analysis (SAST) library for DOM-based XSS detection via AST traversal and taint analysis.

OmniGuard Enterprise — AI-Powered Application Security Platform CLI with Semantic Scanning, Taint Analysis, and Deterministic Compliance Clause Mapping

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1700+ vulnerability rules with AST & taint analysis, LLM-powered semantic code review, auto-fix. For Claude Code, Cursor, Windsu

In-browser, VS Code–style viewer for OpenTaint taint-analysis (SARIF) results — generate a self-contained, offline HTML report from a CLI.

AI-powered security scanner with 15 scan phases, 10 specialist agents, container/IaC/DAST/taint analysis, and AI-assisted remediation.

A lightweight, portable taint analysis for JavaScript.

Fast, zero-config SAST CLI for JavaScript & TypeScript — Node.js backends and frontend frameworks. Detects SQLi, NoSQLi, XSS, DOM-based XSS, RCE, path traversal, secrets, and 60+ other vulnerabilities via AST + taint analysis. Supports Express, NestJS, Fa

Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix. For Claude Code, Cursor, Windsurf, Cline, OpenClaw.

Rust-native dependency vulnerability scanner with AST reachability, taint analysis, and AI triage

Security scanner + AI agent firewall. Blocks secret/PII exfiltration in real time. 752 rules, 82 MCP tools (agent-scan, mcp-audit, guard-action, generate-sbom, dep-reachability, license-compliance), AST taint analysis. Offline, zero telemetry, zero depend

A library for analysing JS RegExp

Free AI-powered SAST + SCA + secret scanning CLI for npm/Node and any codebase — AST taint analysis across 16 languages, dependency CVEs, secrets with live key validation, IaC & malware detection, SARIF for CI/CD. The npm twin of the `sast` PyPI package.

A library to find JS RegExp with super-linear worst-case time complexity for attack strings that repeat a single character.

MCP server for security scanning — analyze any MCP server against 177 detection rules with AST taint analysis, capability graph, and entropy-based secret detection

Parser adapter for parsing JSON documents into base namespace.

Parser adapter for parsing YAML documents into base namespace.