lambdasec / autogrepLinks
Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of high-quality security rules without manual curation.
☆51Updated 8 months ago
Alternatives and similar repositories for autogrep
Users that are interested in autogrep are comparing it to the libraries listed below
Sorting:
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆41Updated 10 months ago
- A very simple open source implementation of Google's Project Naptime☆172Updated 7 months ago
- atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.☆72Updated 2 weeks ago
- ☆93Updated 9 months ago
- Manager of third-party sources of Semgrep rules 🗂☆90Updated last year
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆127Updated 8 months ago
- A comprehensive list of software composition analysis tools.☆156Updated last week
- XBOW Validation Benchmarks☆299Updated 4 months ago
- AI agent for autonomous cyber operations☆319Updated this week
- A collection of permissively licensed Semgrep rules.☆17Updated last year
- future-proof vulnerability detection benchmark, based on CVEs in open-source repos☆60Updated last week
- https://arxiv.org/abs/2412.02776☆64Updated 10 months ago
- SAST + LLM Interprocedural Context Extractor☆118Updated 2 months ago
- Automated web vulnerability scanning with LLM agents☆361Updated 4 months ago
- Trail of Bits Testing Handbook☆82Updated last week
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆137Updated last year
- An open-source security suite aiming to combine structural code analysis with AI-powered vulnerability detection. Built for advanced stru…☆81Updated this week
- 🔍A cutting edge context aware GraphQL API fuzzing tool!☆151Updated last month
- ☆151Updated last month
- A web CTF for training developers in bug hunting and secure coding!☆100Updated 9 months ago
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆24Updated 4 years ago
- Community reconstruction of the legacy JSON NVD Data Feeds. This project uses and redistributes data from the NVD API but is neither endo…☆182Updated this week
- We present MAPTA, a multi-agent system for autonomous web application security assessment that combines large language model orchestratio…☆69Updated 2 months ago
- A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP se…☆103Updated last week
- CodeQL queries developed by Trail of Bits☆130Updated last week
- Semgrep queries developed by Trail of Bits.☆448Updated last month
- ChainReactor is a research project that leverages AI planning to discover exploitation chains for privilege escalation on Unix systems. T…☆52Updated 11 months ago
- tool designed for identifying vulnerabilities in open source codebases at scale. It can gather and filter on key repository metrics such …☆234Updated 8 months ago
- CyberGym is a large-scale, high-quality cybersecurity evaluation framework designed to rigorously assess the capabilities of AI agents on…☆83Updated 3 weeks ago
- Secure Code Review AI Agent (SeCoRA) - AI SAST☆53Updated 8 months ago