|
Kelp — security for vibe-coded apps
The security agent for vibe-coded apps. Kelp probes your backend the way an attacker would and hands you the fix — ready to paste back into your AI tool.
|
81 % |
|
RepoShield — Pre-execution trust & malware detection for GitHub repos
Scan any GitHub repository for install-script risks, suspicious code patterns, dependency threats, and network indicators before you clone or install.
|
80 % |
|
DevOpsCheck — the audit that opens the pull request
Automated DevOps audit for GitHub and GitLab: secrets, known CVEs, GitHub Actions, Docker, Kubernetes and Terraform. Up to 58 checks, a 0–100 score, and fixe...
|
80 % |
|
Jacopo Angeli
MSc candidate. Interested in formal methods.
|
80 % |
|
Gather Step — Local-first Code Graph for AI Coding Assistants
Local-first code graph for AI coding assistants. Trace routes, events, contracts, and change impact across every repo before you edit.
|
80 % |
|
trace-mcp — code graph MCP server for AI coding agents
72.7% fewer input tokens to review a pull request — median over 60 merged pull requests in open-source repos we don't own. trace-mcp is a code graph MCP serv...
|
80 % |
|
LaunchReadyy — Know before you ship
Production readiness for any software repository — sandbox verify, evidence-backed findings, and one-click fix PRs.
|
80 % |
|
Pingory — Catch downtime before your users do.
Free for 50 monitors. Upgrade for 1-minute checks, public status pages & incident timelines. No vendor lock-in.
|
79 % |
|
Aracne — your codebase is a graph, not a pile of files
Aracne scans your source tree into a queryable topology — every function, type and edge — so coding agents navigate a graph instead of grepping files. Up to...
|
79 % |
|
Andesyte · Open security research and applied AI
Open security research across code, cloud and AI systems, applied through public findings, focused reviews and Andesyte Code Security.
|
78 % |
|
HTCAP
|
78 % |
|
Ephyra — Security scanner for AI-built apps
Ephyra finds the dangerous mistakes hiding in your AI-built repo — and gives you a prioritized fix list your coding tool can use right away. Read-only access...
|
78 % |
|
Draugr · Runs every scanner you trust, then decides what matters
Cut scanner noise: every finding ranked by exposure, criticality, exploitability and reachability, from one file in CI. Runs Trivy, Semgrep, Gitleaks and more.
|
78 % |
|
RedFlag - AI security scanner for your codebase
RedFlag runs a deep AI security audit across your GitHub repo and returns every vulnerability - ranked by severity, with the exact file, line, and a one-clic...
|
78 % |
|
TrueSpec - API spec drift guardrails
Keep your OpenAPI and code in sync. TrueSpec flags breaking changes before merge with clear CI reports.
|
78 % |
|
Condux: catch every error, conduct every fix
Source-available error monitoring with an AI fix engine that opens draft pull requests your team reviews and merges. Managed cloud or self-host.
|
78 % |
|
Higharch 5 — Where the elite build.
Connect a GitHub repo and a team of AI specialists audits security, scalability, SEO, and production readiness — then opens a pull request with the fixes.
|
78 % |
|
RepoBuddy — AI assistant for understanding codebases via knowledge graphs
RepoBuddy indexes a Git repository into a hybrid knowledge graph (AST + LLM annotations + git history) and answers questions in plain language with cited sou...
|
78 % |
|
gitgot · from repo URL to first-pass PR
Paste any public GitHub repo. gitgot maps the architecture, surfaces real owners, classifies the open issues, and drafts a PR against the one you choose.
|
78 % |
|
Alpha - Open Source Pentest Evidence Capture Platform
Every host, credential, and finding from your pentest, in one place. Alpha captures tool output, parses it into structured data, and puts it on a shared server.
|
78 % |
Detected social media networks