#sast
Blacklock CodeScan
blacklockio
Security scanning powered by Blacklock CodeScan
AI Security Scanner
ontedduabhishakereddy
Real-time detection of prompt injection, data leakage risks, and AI API misuse in your code — before they reach production.
Custodia — Security & Compliance Autopilot
CustodiaLLC
OWASP Top 10, SOC 2, HIPAA, PCI DSS scanning with inline findings, AI fix prompts, and compliance gap reports. One click.
AOYS
Nily
Local model powered intelligent code auditor — security + quality + auto-fix (fully local)
WatsonSec
TejGokani
Local-first security engine: runs real scanners (Semgrep, Gitleaks, Trivy, Checkov, Bandit, gosec, Grype, TruffleHog, CodeQL) on every save, deduplicates findings, and surfaces them in a dashboard and MCP bridge.
SafeLens
Namith011
Scan files and folders with SafeLens, get AI-powered vulnerability explanations, inline markers, and a smart security sidebar.
Rethos Security
emile-eid
AI-powered real-time security vulnerability detection. Catches SQL injection, XSS, command injection, hardcoded secrets, and unsafe deserialization as you code — with AI explanations and one-click auto-fix.
Shomra — AI Security
Shomra
Gate and fix AI artifacts (MCP servers, Skills, rules, hooks) and flag known-vulnerable AI models right in your editor. Works in VS Code and Cursor.
VulTech — Enterprise Application Security
vultechio
Unified SAST, SCA & compliance in VS Code and Cursor. Enterprise SSO, air-gapped on-prem, and the same detection engine as the VulTech platform.
Scrutora Scan
Scrutora
Offline DPDPA / HIPAA / GDPR / PCI-DSS / RBI compliance scanning for Azure Pipelines. No API key; your code never leaves the agent. SARIF output.
oauthlint
auspeo
Catch the OAuth/OIDC/JWT/MCP anti-patterns AI coding tools produce across eleven languages (JS/TS, Python, Go, C#, and more) plus mobile (Swift/iOS, Android), right inside VS Code, Cursor, Windsurf, and other VS Code forks.
Furgle Ai .
Furgleai
Distributed AI-native security client with local static analysis and cloud patch previews