#cve

SAST

InsomniaSAST

Inline secret + vulnerability scanning for your editor. Catches AWS/Stripe/JWT secrets, SQLi, command-injection and dependency CVEs as you save, and blocks git pushes that would leak them.

DrBinary MCP

deepbits

Adds the DrBinary (Deepbits) security MCP server to VS Code for malware analysis, binary reverse engineering, and threat detection.

SentinelCore

jabesxfuentes

SentinelCore detects vulnerable dependencies, risky code patterns, AI-like code smells, and security issues across JavaScript, TypeScript, Python, PHP, and HTML. Author: Jabes Fuentes

Coderwodar – AI Security Scanner

AbdulMateenQamar

AI-powered security code analysis and CVE vulnerability detection for your project dependencies. Detects OWASP Top 10, CWE vulnerabilities, and checks npm/pip/NuGet packages against known CVEs. Powered by OpenAI and Supabase.

A Pre-commit Security Vulnerability Detection Tool for Python security scaning which includes taint analysis, CVE detection, sandbox execution, SARIF reporting, and intelligent vulnerability assessment.

Scan Gemfile and package.json for known vulnerabilities using OSV.dev

VulTech — Enterprise Application Security

vultechio

Unified SAST, SCA & compliance in VS Code and Cursor. Enterprise SSO, air-gapped on-prem, and the same detection engine as the VulTech platform.

DepAnalyzer Security

DepAnalyzerUPT

Detecta dependencias vulnerables y desactualizadas desde Visual Studio Code.

FLCN Security — Credential & Vulnerability Guard

FLCN-16

Real-time credential detection and redaction. Protects against leaking API keys, tokens, and secrets to AI coding assistants.

AI-powered predictive security analysis with LangGraph multi-agent system, real CVE database scanning via OSV.dev, CWE classification, and cross-module impact prediction

DependencyAudit — Vulnerabilities on Your Import Lines

mjethwa-streamlit

Shows CVE severity badges on import statements using OSV.dev, with safe-version hints. License compliance, transitive scanning, and commit checks with Pro.

vuln.mlab.sh SBOM scan

mlab-sh

Manually scan lockfiles for known CVEs via vuln.mlab.sh. No automatic scanning; you decide when a lockfile leaves your machine.