Security scanner for Capacitor apps - detect vulnerabilities, hardcoded secrets, and security misconfigurations

Primitive validator for detecting hardcoded secrets and sensitive patterns in code

Detect hardcoded secrets in source and config, reporting masked previews and never the values themselves.

SIC free code scanner — read-only static analysis for hardcoded secrets, dangerous patterns, and dependency CVEs. Zero runtime dependencies.

Free offline CLI that scans your local repo for hardcoded secrets and risky AI-generated code before you ship.

Account-free MCP server: catch AI-hallucinated packages (npm, PyPI, crates.io, RubyGems, Go, Packagist), risk-score the dependencies an AI agent introduces, and find hardcoded secrets before you commit. Exposes the free pre_flight_check tool over stdio.

A lightweight CLI tool that scans your codebase for hardcoded secrets, API keys, and passwords before they leak into version control.

ESLint plugin for JWT security — detects algorithm confusion (CVE-2022-23540), alg:none, weak or hardcoded secrets, and decode-without-verify.

MCP server: security scanner for AI-generated code: the agent scans its own code/diff before committing. Detects injection, SSRF, hardcoded secrets, weak crypto, unsafe deserialization, TLS-off, XSS. Deterministic, free, no LLM.

Keep your AI coding agent on a leash: a zero-config git hook that blocks reckless commits and force-pushes — huge diffs, deleted tests, hardcoded secrets, CI edits — before they land.

Security scanner for AI apps. Detect hardcoded secrets, PII leaks, and exposed routes.

The trust layer for AI-generated software. Catches phantom dependencies, ghost API routes, fake SDK methods, and hardcoded secrets — before they ship.

GitHub-native guardrails for AI-generated code. ESLint plugin and GitHub Action for detecting async reliability issues, floating promises, empty catch blocks, hardcoded secrets, SQL injection, and more. SARIF-based GitHub Code Scanning integration with PR

Code Sentinel AST & AI Security Auditor CLI - Scan local repositories, SD cards, live URLs, and GitHub repos for security flaws and hardcoded secrets.

Local-first security check MCP server for AI coding agents — finds hardcoded secrets, exposed .env files, secrets in git history, and vulnerable dependencies in your workspace, entirely on your machine.

Security scanner for Capacitor apps - detect vulnerabilities, hardcoded secrets, and security misconfigurations

MCP server that scans AI-generated code for security vulnerabilities (OWASP Top 10, hardcoded secrets, SQL injection, XSS)

Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.

Security scanner for vibe-coded projects: local CLI and MCP server that catch the security mistakes an AI coding assistant can silently introduce (hardcoded secrets, disabled RLS, open CORS, missing security headers) before you push.

A linter for AI behavior — catches duplicates, unregistered components, and hardcoded secrets in React projects