Secure Code Review AI Agent (SeCoRA) - AI SAST
-
Updated
Jan 29, 2025 - Python
#
secure-code-review
Here are 24 public repositories matching this topic...
A terminal interactive game designed to train yourself to identify insecure coding practices.
-
Updated
Oct 29, 2025 - Go
Defensive AI security audit skill for Claude and Codex. Reviews codebases and web apps for OWASP Top 10, auth and authorization flaws, business logic bugs, tenant isolation gaps, insecure defaults, secret leaks, and ORM or N+1 query issues, then produces clear remediation guidance.
security security-audit authentication authorization web-security business-logic appsec codex owasp-top-10 api-security secure-code-review agent-skills claude-code claude-code-plugin claude-code-skills claude-code-skill codex-skill
-
Updated
Apr 16, 2026 - JavaScript
Portable defensive application security and AI-agent security skill for Claude Code, Codex, Gemini, and ChatGPT. Covers OWASP, secure design, secure code review, MCP security, prompt injection, threat modeling, incident response, and hardening.
incident-response owasp cybersecurity infosec application-security security-hardening threat-modeling appsec vulnerability-management secure-design secure-coding devsecops security-engineering ai-security secure-code-review prompt-injection llm-security agentic-ai agent-security mcp-security
-
Updated
Sep 7, 2026 - Python
AppSec interview questions and study guides covering web, mobile, cloud, DevSecOps, and secure code review.
-
Updated
Jan 20, 2026
Developer behind VirtualSpace AppSec - a Windows secure code review tool by Verse (NL, KVK 88114171) that runs entirely on your own machine.
-
Updated
Jun 16, 2026
Windows secure code review tool by Verse. SAST + on-device AI analysis for C/C++, Python, JavaScript, and .NET source projects you own or are authorized to review - runs entirely on your own machine.
-
Updated
Jun 17, 2026 - Python
Local MCP server that helps coding agents run defensive, remediation-focused secure code review of source repositories.
-
Updated
Sep 13, 2026 - TypeScript
Real-time code analysis that detects cross-file semantic errors, type inconsistencies, array bound violations, and function signature drift while you type, before files are saved, without external security APIs.
security secure-coding security-tools secure-ai code-analysis-true secure-code-review ai-code-reviewer codereview-tools
-
Updated
Feb 21, 2026 - Python
University job board reviewed as unfamiliar code: twelve findings including an authentication bypass via a client-supplied header, each fixed and held by a regression test.
java spring-boot authentication owasp spring-security cybersecurity csrf appsec vulnerability-assessment cwe security-testing secure-code-review
-
Updated
Sep 9, 2026 - Java
CosmoGrepperAI is a highly polished, open-source application security scanner designed to dramatically outperform raw static analysis tools.
application static-code-analysis static-analysis appsec security-scanner security-tools owasp-top-10 vulnerability-scanner sast semgrep generative-ai secure-code-review genai ai-code-review
-
Updated
Jun 14, 2026 - Python
Online admission and seat-allocation system for the University of Kalamoon. ASP.NET Core MVC + EF Core + SQL Server graduation project (2022), with a 2026 security review.
sql-server csharp entity-framework-core aspnet-core asp-net-mvc aspnet-identity graduation-project owasp-top-10 university-admission secure-code-review
-
Updated
Sep 19, 2026 - HTML
Most AI security tools try to find more. SecHelix tries to prove itself wrong: every candidate finding goes to an independent verifier whose only job is to disprove it. Open-source AppSec agent for Claude Code, Codex and Copilot.
security-audit authorization cybersecurity application-security business-logic appsec codex devsecops security-testing ai-security idor codeql semgrep false-positives github-copilot secure-code-review bola agent-skills claude-code mcp-security
-
Updated
Sep 15, 2026 - Python
Easy-to-use, customizable, high-quality secure code review skills for AI agents.
agent security ai skills penetration-testing bug-bounty offensive-security vulnerability-management vulnerability-assessment ethical-hacking risk-management claude red-team-engagement defensive-security ai-agent security-requirements-analysis threat-management secure-code-review llm-agent agent-skills
-
Updated
Sep 7, 2026
VS Code extension prototype that uses adversarial LLM review to identify insecure code patterns, propose hardened alternatives, and apply approved local code changes.
gemini cybersecurity vscode-extension devsecops claude ai-security llm generative-ai secure-code-review
-
Updated
Feb 28, 2026 - TypeScript
One real vulnerability, one scary-looking false positive — can your scanner tell which is which? 10 AppSec cases, 3 of them decoys. A false positive costs exactly what a miss costs.
security benchmark cybersecurity application-security appsec devsecops security-testing sast ai-security false-positives secure-code-review
-
Updated
Sep 9, 2026 - Python
Beginner forensics mini-CTF — web log analysis, encoding vs encryption, secure code review of a vulnerable Flask endpoint, and classical ciphers, told as one continuous incident. Every flag independently verified.
log-analysis incident-response cybersecurity sql-injection ctf digital-forensics security-education secure-code-review
-
Updated
May 21, 2026
Local defensive remediation lab using OpenAI Codex CLI, secure code review, patch validation and human-in-the-loop approval.
-
Updated
Jun 13, 2026 - CSS
LabSite — AppSec triage trainer with 100+ hands-on tasks and challenges.
-
Updated
Aug 2, 2026
AI-powered code review agent with rule-based detection and RAG-enhanced security analysis
flask security-audit mongodb owasp cwe github-app devsecops rag fastapi pull-request-review secure-code-review ai-code-review
-
Updated
Jul 9, 2026 - Jupyter Notebook
Add this topic to your repo
To associate your repository with the secure-code-review topic, visit your repo's landing page and select "manage topics."