#sast

Security for AI-assisted development — inline diagnostics for insecure code plus an AI Agent Blast Radius checkup for MCP, Claude/Cursor configs, and GitHub Actions.

SANGKUR — AI Security Scanner

sangkur

Find vulnerabilities in your code with 7-engine AI security analysis. SQLi, XSS, SSRF, CSRF, and 40+ vulnerability types detected inline.

Guardmarly — Offline SAST Security Scanner

guardmarly

Zero-dependency SAST for Python, JS/TS, Go, Java & C#. Built-in IDOR detection. 100% CVE recall. Trace-backed findings inline while you code.

StarGuard

starbridge

Análise de segurança no editor com a sua conta StarGuard: código, dependências, regras de negócio e skills — cada uma por conta própria, com correção assistida. Requer conta da Starbridge.

CodeMore

CodeMore

The static analyzer your AI agent reads — finds production-blocking bugs in vibe-coded apps (CLI, GitHub Action, MCP server).

Scrutora Scan

Scrutora

Offline DPDPA / HIPAA / GDPR / PCI-DSS / RBI compliance scanning in your editor. Findings appear in the Problems panel. No API key; your code never leaves your machine.

Arcanum Sentinel

arcanum

Offline, real-time security diagnostics for JavaScript, TypeScript, Python, Java, C#, Go, PHP, Ruby, and Rust.

SecureRefactor

RamMohanReddyK

Scan your workspace for security vulnerabilities, vulnerable dependencies, and code quality issues. Review AI-assisted fixes as diffs before applying.

KlynxLint — AI Security Scanner

klynxai

Inline SAST + secrets detection for every file you edit. Powered by KlynxAI.

AI-powered predictive security analysis with LangGraph multi-agent system, real CVE database scanning via OSV.dev, CWE classification, and cross-module impact prediction

Aegis Security

aegis-security

Evidence-backed security for AI-generated software: findings, fixes, independent verification, policy, and audit inside VS Code.

AuraWatch Enterprise Security

optirefine

Deterministic AST + Z3 Symbolic Code Security Scanner and Auto-Fixer.