#security
Guardmarly — Offline SAST Security Scanner
guardmarly
Zero-dependency SAST for Python, JS/TS, Go, Java & C#. Built-in IDOR detection. 100% CVE recall. Trace-backed findings inline while you code.
mcpgawk — audit your MCP servers
gawk-dev
See every MCP server configured across your AI tools, what each one can do to you, and what it costs your context window. Local-first: nothing leaves your machine.
Qualys TotalAppSec Scanning Connector
Qualys-Inc
Detect Web and API application vulnerabilities using the Qualys TotalAppSec (TAS) Scanning service
Arcanum Sentinel
arcanum
Offline, real-time security diagnostics for JavaScript, TypeScript, Python, Java, C#, Go, PHP, Ruby, and Rust.
CodeMore
CodeMore
The static analyzer your AI agent reads — finds production-blocking bugs in vibe-coded apps (CLI, GitHub Action, MCP server).
Scrutora Scan
Scrutora
Offline DPDPA / HIPAA / GDPR / PCI-DSS / RBI compliance scanning in your editor. Findings appear in the Problems panel. No API key; your code never leaves your machine.
0x13d::att&ck — Rule Builder
0x13D
Build, validate, and tune 0x13d::att&ck (Browser EDR) detection rules — a Blockly visual builder, schema validation, and a scenario harness that reports detection + false-positive rates.
SecureRefactor
RamMohanReddyK
Scan your workspace for security vulnerabilities, vulnerable dependencies, and code quality issues. Review AI-assisted fixes as diffs before applying.
TrafficWatch IDS Tools
trafficwatchids
Herramientas de apoyo para revisar, validar y presentar el proyecto TrafficWatch IDS desde Visual Studio Code.
Aarunya Dev Tools — .env Guard, JSON→TS, Cron Hover
aarunyaapps
Flags secrets in .env files before you commit them, generates .env.example, converts JSON to TypeScript/Zod, and shows cron next-run times on hover. Zero telemetry.
Unslop
cognitive-industries
Drive the local unslop CLI from VS Code: bug/vuln, code-quality and secrets/PII diagnostics, plus the never-in-place fix flow.
Git Hook Guard
muasif80
Automatically scans opened Git repositories for malicious git hooks (remote-code-execution droppers) and lets you quarantine them before they can run.