lambdasec / autogrepLinks
Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of high-quality security rules without manual curation.
☆65Updated 10 months ago
Alternatives and similar repositories for autogrep
Users that are interested in autogrep are comparing it to the libraries listed below
Sorting:
- Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂☆97Updated 3 weeks ago
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆42Updated last year
- Metis is an open-source, AI-driven tool for deep security code review☆449Updated this week
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆139Updated 10 months ago
- A collection of permissively licensed Semgrep rules.☆19Updated last year
- SAST + LLM Interprocedural Context Extractor☆174Updated 2 months ago
- atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.☆81Updated last week
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers…☆134Updated last month
- A very simple open source implementation of Google's Project Naptime☆181Updated 9 months ago
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆23Updated 4 years ago
- AI agent for autonomous cyber operations☆464Updated last month
- Data about all known supply-chain attacks through history☆63Updated 7 months ago
- A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…☆139Updated last year
- A comprehensive list of software composition analysis tools.☆160Updated 2 months ago
- Trail of Bits Testing Handbook - appsec.guide☆89Updated last week
- ☆101Updated last month
- A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP se…☆120Updated last month
- 🔍A cutting edge context aware GraphQL API fuzzing tool!☆156Updated this week
- LLM | Security | Operations in one github repo with good links and pictures.☆87Updated 2 weeks ago
- future-proof vulnerability detection benchmark, based on CVEs in open-source repos☆64Updated last week
- Secrets scanner that understands code☆163Updated last month
- Community reconstruction of the legacy JSON NVD Data Feeds. This project uses and redistributes data from the NVD API but is neither endo…☆198Updated this week
- An open-source security suite aiming to combine structural code analysis with AI-powered vulnerability detection. Built for advanced stru…☆90Updated last week
- FastCVE: A Dockerized CVE search tool with API and CLI support for security vulnerability queries.☆60Updated 2 weeks ago
- https://arxiv.org/abs/2412.02776☆67Updated last year
- SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context P…☆134Updated 7 months ago
- We present MAPTA, a multi-agent system for autonomous web application security assessment that combines large language model orchestratio…☆87Updated 4 months ago
- Vanir is a source code-based static analysis tool that automatically identifies the list of missing security patches in the target system…☆348Updated 3 months ago
- ChainReactor is a research project that leverages AI planning to discover exploitation chains for privilege escalation on Unix systems. T…☆55Updated last year
- Browser based Privacy Aware SBoM Exploration☆27Updated 2 weeks ago