#sast

Herozion — Security scanner for VS Code and Cursor

herozion

Detect OWASP vulnerabilities, exposed secrets, and injection flaws inline while you code — no context switching required.

Zcodee AI — Code analyst and vulnerability Scanner

Sicilylabs

AI-powered vulnerability scanner that analyzes your entire codebase and delivers a prioritized, actionable security report with concrete fix suggestions.

SAST

InsomniaSAST

Inline secret + vulnerability scanning for your editor. Catches AWS/Stripe/JWT secrets, SQLi, command-injection and dependency CVEs as you save, and blocks git pushes that would leak them.

GitHub Guardian

DakshSrivastava

Real-time secret leak detection & SAST vulnerability scanner with inline diagnostics, Quick Fixes, and workspace scanning.

SYNAPTIC Sentinel

RealGoLab

The vibe-coding security sentinel. Apache-2.0 agentic auditing for AI-assisted projects: five scouts (OpenGrep, Gitleaks, Trivy, Checkov, Vibe-Detect) + a Brain Layer (BYOK Anthropic) that triages, explains and remediates — all in the IDE.

AppsecD

bira

Shift-left AppSec for VS Code & Cursor — SAST + secret scan on every commit, AI-powered fix suggestions, and a per-org governance dashboard. Powered by appsec.shiprocket.in.

VibeSafe - Security Scanner

vibesafe-info

Scan your code for security vulnerabilities, exposed secrets, and bugs. Built for vibe coders. Official extension of vibesafe.info

Find security vulnerabilities in your code as you write it. 210 rules tuned for AI-generated code from Cursor, Lovable, Bolt, Replit, and Claude Code. Runs locally — nothing uploaded.

A Pre-commit Security Vulnerability Detection Tool for Python security scaning which includes taint analysis, CVE detection, sandbox execution, SARIF reporting, and intelligent vulnerability assessment.

SonarQube Dashboard & Pipeline

jesusromero

Run SonarQube analysis pipelines and inspect Quality Gates, issues, Security Hotspots, coverage, duplication, and execution history directly in VS Code.

Cycode

cycode

Run Cycode security scans (Secrets, SAST, SCA, IaC) in Azure Pipelines and view an aggregated HTML report in a build results tab.

RepoScope — AI Cost Intelligence & Security Scanner

nxgentech

See what your AI subscription actually costs you — per file, per prompt, per month. RepoScope shows which files burn the most tokens, audits your .cursorrules for bloat, and projects when your Cursor Pro or Claude Pro plan runs out. Free: 44-detector security scanner (secrets, XSS, SQL injection) +