Vexa brings the power of multiple industry-standard security scanners and state-of-the-art AI models (Claude 3.7, Gemini 2.x, GPT-4o) directly into your VS Code workflow. Stop security issues before they even reach your repository.
- 🔍 AI-Powered Remediation: Don't just find vulnerabilities—fix them. Vexa uses advanced LLMs to analyze findings and propose precise, context-aware code fixes that you can apply with a single click.
- 🚀 Multi-Scanner Coordination: Simultaneously run Bandit, Semgrep, Checkov, and Detect-Secrets. Vexa orchestrates these tools and deduplicates findings into a unified view.
- 🛡️ Infrastructure as Code (IaC) Security: Scan your Terraform, Dockerfile, and K8s manifests for security misconfigurations before they reach production.
- 🔑 Secret Leak Prevention: Automatically detect hardcoded secrets, API keys, and tokens in your source code using high-entropy detection patterns.
- ⚡ Native IDE Experience: Seamlessly integrated into VS Code with gutter icons, editor squiggles, hover details, and a dedicated security dashboard sidebar.
New to Vexa?
Visit vexasec.io to learn more.
Prefer the Command Line?
Vexa also offers a powerful terminal-based experience for automation and CI/CD integration. Use the vexa-cli to run scans in your build pipelines.
Requirements
- VS Code 1.80.0 or higher
- Python 3.10+ with
vexa-coreinstalled
Built with ❤️ by Vexa