lambdasec / autogrepLinks
Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of high-quality security rules without manual curation.
☆49Updated 7 months ago
Alternatives and similar repositories for autogrep
Users that are interested in autogrep are comparing it to the libraries listed below
Sorting:
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆41Updated 9 months ago
- XBOW Validation Benchmarks☆246Updated 3 months ago
- A very simple open source implementation of Google's Project Naptime☆169Updated 6 months ago
- atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.☆73Updated last week
- A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP se…☆99Updated 3 weeks ago
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆127Updated 7 months ago
- Top 10 for Agentic AI (AI Agent Security) serves as the core for OWASP and CSA Red teaming work☆139Updated 3 months ago
- ☆88Updated 8 months ago
- Manager of third-party sources of Semgrep rules 🗂☆88Updated last year
- Automated web vulnerability scanning with LLM agents☆355Updated 3 months ago
- ☆99Updated this week
- https://arxiv.org/abs/2412.02776☆62Updated 10 months ago
- future-proof vulnerability detection benchmark, based on CVEs in open-source repos☆60Updated last week
- We present MAPTA, a multi-agent system for autonomous web application security assessment that combines large language model orchestratio…☆65Updated last month
- An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.☆239Updated this week
- A comprehensive list of software composition analysis tools.☆156Updated last year
- A collection of permissively licensed Semgrep rules.☆15Updated last year
- Secure Code Review AI Agent (SeCoRA) - AI SAST☆51Updated 8 months ago
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆137Updated last year
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…☆129Updated last month
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆23Updated 4 years ago
- LLM | Security | Operations in one github repo with good links and pictures.☆57Updated 9 months ago
- 🔍A cutting edge context aware GraphQL API fuzzing tool!☆148Updated last month
- SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context P…☆133Updated 4 months ago
- A powerful tool that leverages AI to automatically generate comprehensive security documentation for your projects☆92Updated last month
- Delving into the Realm of LLM Security: An Exploration of Offensive and Defensive Tools, Unveiling Their Present Capabilities.☆165Updated last year
- Project Mantis: Hacking Back the AI-Hacker; Prompt Injection as a Defense Against LLM-driven Cyberattacks☆86Updated 4 months ago
- A flexible framework for security teams to build and deploy AI-powered workflows that complement their existing security operations.☆127Updated this week
- A security tool that detects malicious packages from external vulnerability feeds and searches for them in your package registries or art…☆52Updated last week
- Code snippets to reproduce MCP tool poisoning attacks.☆181Updated 5 months ago