shivamsaraswat / SeCoRALinks
Secure Code Review AI Agent (SeCoRA) - AI SAST
☆53Updated 9 months ago
Alternatives and similar repositories for SeCoRA
Users that are interested in SeCoRA are comparing it to the libraries listed below
Sorting:
- Identify hardcoded secrets in static structured text (version 2)☆95Updated 9 months ago
- A web CTF for training developers in bug hunting and secure coding!☆101Updated 10 months ago
- Use AI to Scan Your Code from the Command Line for security and code smells. Bring your own keys. Supports OpenAI and Gemini☆174Updated 6 months ago
- Secrets Ninja is an GUI tool for validating & investigating API keys discovered during pentesting & bug bounty hunting.☆154Updated 2 months ago
- Feed it a number. Your cloned voice does the social engineering, while you sip your coffee. A ghost that talks on the phone for you.☆104Updated 5 months ago
- AuditForge is a pentest reporting application making it simple and easy to write your findings and generate a customizable report.☆74Updated 2 months ago
- A powerful tool that leverages AI to automatically generate comprehensive security documentation for your projects☆97Updated last month
- RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…☆155Updated 11 months ago
- A multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.☆163Updated 2 months ago
- Nuclei plugins to audit Chrome extensions☆65Updated last year
- Static code analyser for backdoors and malicious code in git repos using OpenAI compatible LLM APIs☆73Updated last year
- AIGoat: A deliberately Vulnerable AI Infrastructure. Learn AI security through solving our challenges.☆257Updated last month
- A security tool that detects malicious packages from external vulnerability feeds and searches for them in your package registries or art…☆64Updated last week
- Security tool against dependency typosquatting attacks☆54Updated this week
- Repository containing source code of MixewayFlow service that is Swiss army knife for DevSecOps Teams☆75Updated this week
- Red Teaming for AI and Cloud☆198Updated 5 months ago
- tool designed for identifying vulnerabilities in open source codebases at scale. It can gather and filter on key repository metrics such …☆234Updated 9 months ago
- Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments☆142Updated 10 months ago
- A tool to uncover undocumented APIs from the AWS Console.☆114Updated 6 months ago
- A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…☆110Updated last year
- A Model Context Protocol server that connects AI assistants like Claude to AWS security services, allowing them to autonomously query, in…☆76Updated 3 months ago
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆41Updated 11 months ago
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆227Updated 5 months ago
- ☆100Updated last month
- AcSecurity is a Python module designed to scan applications for common security vulnerabilities. It checks for hardcoded secrets, depende…☆16Updated 2 months ago
- PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.☆67Updated this week
- A Powerful Network Reconnaissance Tool for Security Professionals☆105Updated 10 months ago
- Stalker, the Extensible Attack Surface Management tool.☆87Updated last month
- Hijack a slack bot to phish your way in☆57Updated 3 months ago
- SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context P…☆133Updated 5 months ago