|
DevOpsCheck — the audit that opens the pull request
Automated DevOps audit for GitHub and GitLab: secrets, known CVEs, GitHub Actions, Docker, Kubernetes and Terraform. Up to 58 checks, a 0–100 score, and fixe...
|
83 % |
|
LARP CHECK — GitHub Credibility Scanner
|
82 % |
|
Git Code Review: find leaked credentials and vulnerable code across every repository you own
Git Code Review is a free and open source security scanner for GitHub, GitLab, Bitbucket, Azure Repos and six more. Secret scanning with live verification, s...
|
82 % |
|
Patchlight · AI code review & security monitoring for GitHub
Whole-repo security scans and automated PR code review. No per-seat pricing, no subscriptions, pay only for what you use.
|
81 % |
|
Kagex — Security Beyond Dimensions
The security reputation layer for smart contracts. Continuous AI analysis on every pull request, distilled into one score protocols publish and users trust.
|
81 % |
|
aobtd | understand first. then bite.
aobtd explores a web app before testing it, chooses checks that fit what it finds, and saves the evidence.
|
80 % |
|
Runveil — Security that sees what actually runs
Runveil is runtime-native vulnerability intelligence. It maps what your application actually runs, flags only reachable risk, and cuts npm audit noise from h...
|
80 % |
|
TrustOSS — GitHub Repository Quality Analyzer
Search, compare, and analyze open-source GitHub libraries. Health scores, fake-star audits, deep scans for vulnerabilities and bus factor, shareable reports...
|
80 % |
|
Ephyra — Security scanner for AI-built apps
Ephyra finds the dangerous mistakes hiding in your AI-built repo — and gives you a prioritized fix list your coding tool can use right away. Read-only access...
|
80 % |
|
Vibe Check: AI security scanner for AI-built apps
AI-generated code ships fast. Security holes ship with it. Paste a public GitHub URL and get plain-English security findings in minutes.
|
80 % |
|
Oh My Audit — Pre-Launch Security Report
Vibe-coded apps ship fast. We audit what the surface hides — payments, auth, admin panels, secrets — before your users find the cracks.
|
80 % |
|
Overshare — open-source security scanner for AI-built apps
Open-source security scanner for AI-built web apps. Paste a URL or run it in CI on every deploy. Finds exposed API keys, source maps and misconfiguration — h...
|
80 % |
|
GateTest — CI quality gate for AI-written code
122 deterministic checks in one CI gate. Fails on the diff, not the backlog. Precision published on pinned third-party repos. Optional fix PR with a regressi...
|
80 % |
|
scanpack — not another scanner. All of them.
scanpack runs the security scanners you already trust, then proves which findings an attacker can actually reach — and writes the justification for the ones...
|
80 % |
|
QAClan — browser and API regression, run on your machine
QAClan captures your browser flow and the API calls it fires, then replays both as one suite — on your machine, the same way every time.
|
79 % |
|
AfterSE — AI pull-request reviews you can actually trust
Multi-model AI code review for GitHub. Every finding is grounded to file:line and re-checked by a verification gate before it's posted — so you get real bugs...
|
79 % |
|
CodeSentinel
Always-on AI code review that catches bugs, security flaws, and quality issues on every pull request — across GitHub, GitLab, and Bitbucket.
|
79 % |
|
Kusari — Know what's really in your software.
Kusari is the Software Supply Chain Trust Platform. Know every component you ship, fix what matters automatically, and prove trust continuously.
|
79 % |
|
Kusari — Know what's really in your software.
Kusari is the Software Supply Chain Trust Platform. Know every component you ship, fix what matters automatically, and prove trust continuously.
|
79 % |
|
crimes: change risk for TypeScript, JavaScript and Python
Open-source CLI that scans TypeScript, JavaScript & Python repos for change risk and AI-agent risk, including disagreements between languages. Runs locally a...
|
79 % |
Detected social media networks