#OWASP

Herozion — Security scanner for VS Code and Cursor

herozion

Detect OWASP vulnerabilities, exposed secrets, and injection flaws inline while you code — no context switching required.

Zcodee AI — Code analyst and vulnerability Scanner

Sicilylabs

AI-powered vulnerability scanner that analyzes your entire codebase and delivers a prioritized, actionable security report with concrete fix suggestions.

SAST

InsomniaSAST

Inline secret + vulnerability scanning for your editor. Catches AWS/Stripe/JWT secrets, SQLi, command-injection and dependency CVEs as you save, and blocks git pushes that would leak them.

OWASP GitHub Workflow Updater

OWASP

Pin GitHub Actions to specific commits for enhanced security

AppsecD

bira

Shift-left AppSec for VS Code & Cursor — SAST + secret scan on every commit, AI-powered fix suggestions, and a per-org governance dashboard. Powered by appsec.shiprocket.in.

Coderwodar – AI Security Scanner

AbdulMateenQamar

AI-powered security code analysis and CVE vulnerability detection for your project dependencies. Detects OWASP Top 10, CWE vulnerabilities, and checks npm/pip/NuGet packages against known CVEs. Powered by OpenAI and Supabase.

Find security vulnerabilities in your code as you write it. 210 rules tuned for AI-generated code from Cursor, Lovable, Bolt, Replit, and Claude Code. Runs locally — nothing uploaded.

OWASP Security Checker

NormDev

Статический анализ кода на уязвимости OWASP Top 10:2025 — A04 Cryptographic Failures, A07 Authentication Failures

OWASP LLM Sentinel

AkshayDamle

OWASP LLM Top 10 security sentinel — inline squiggles, compliance HUD, risk map, audit reports, quick fixes, and optional AI remediation.

RepoScope — AI Cost Intelligence & Security Scanner

nxgentech

See what your AI subscription actually costs you — per file, per prompt, per month. RepoScope shows which files burn the most tokens, audits your .cursorrules for bloat, and projects when your Cursor Pro or Claude Pro plan runs out. Free: 44-detector security scanner (secrets, XSS, SQL injection) +

Custodia — Security & Compliance Autopilot

CustodiaLLC

OWASP Top 10, SOC 2, HIPAA, PCI DSS scanning with inline findings, AI fix prompts, and compliance gap reports. One click.

Pipefort

pipefort

Scan CI/CD pipelines for OWASP CI/CD Top 10, SLSA, and supply-chain issues — inline diagnostics, toxic-combination detection, and quick fixes.