#scanner

Zcodee AI — Code analyst and vulnerability Scanner

Sicilylabs

AI-powered vulnerability scanner that analyzes your entire codebase and delivers a prioritized, actionable security report with concrete fix suggestions.

axle — a11y / WCAG scanner

asafamos

Scan any URL for WCAG 2.2 AA accessibility violations from inside VS Code. Powered by axe-core 4.11. Optional Claude-generated fix suggestions.

Guardian — Glassworm & Malware Scanner

ankushlokhande

Glassworm & malware scanner for VS Code. Detects malicious workspace tasks, injected configs, fake fonts, and stealth propagation scripts across Git branches.

PerfScope — VS Code Performance Lens

Evhye

VS Code performance health scanner and optimization guide - analyze extensions, find slowdown causes, and apply safe workspace fixes with one click.

VibeSafe - Security Scanner

vibesafe-info

Scan your code for security vulnerabilities, exposed secrets, and bugs. Built for vibe coders. Official extension of vibesafe.info

SentryBox Security Scanner

NavadeepBoyana

AI-powered Python package security scanner — auto-scans imports in real-time

extensionvalidatev1

SiddharthaSanapala

AI-Powered VS Code Extension Security & Trust Analyzer - Analyze extensions with AI version scoring, personalized recommendations, security assessments, and trend insights

Find security vulnerabilities in your code as you write it. 210 rules tuned for AI-generated code from Cursor, Lovable, Bolt, Replit, and Claude Code. Runs locally — nothing uploaded.

Cavisson Code Analyzer

cavisson-systems

Advanced static code analysis and security scanning for Java, C#, Python, JavaScript, TypeScript, HTML, PHP, CSS, and more inside Visual Studio Code.

A Pre-commit Security Vulnerability Detection Tool for Python security scaning which includes taint analysis, CVE detection, sandbox execution, SARIF reporting, and intelligent vulnerability assessment.

Entro Security DevGuard

entro-security

Scans for exposed secrets using the Entro Security API.

AI Security Scanner

ontedduabhishakereddy

Real-time detection of prompt injection, data leakage risks, and AI API misuse in your code — before they reach production.