#vulnerability

Herozion — Security scanner for VS Code and Cursor

herozion

Detect OWASP vulnerabilities, exposed secrets, and injection flaws inline while you code — no context switching required.

Zcodee AI — Code analyst and vulnerability Scanner

Sicilylabs

AI-powered vulnerability scanner that analyzes your entire codebase and delivers a prioritized, actionable security report with concrete fix suggestions.

SAST

InsomniaSAST

Inline secret + vulnerability scanning for your editor. Catches AWS/Stripe/JWT secrets, SQLi, command-injection and dependency CVEs as you save, and blocks git pushes that would leak them.

DrBinary MCP

deepbits

Adds the DrBinary (Deepbits) security MCP server to VS Code for malware analysis, binary reverse engineering, and threat detection.

Guardian — Glassworm & Malware Scanner

ankushlokhande

Glassworm & malware scanner for VS Code. Detects malicious workspace tasks, injected configs, fake fonts, and stealth propagation scripts across Git branches.

AppsecD

bira

Shift-left AppSec for VS Code & Cursor — SAST + secret scan on every commit, AI-powered fix suggestions, and a per-org governance dashboard. Powered by appsec.shiprocket.in.

npm-dependency-manager

noritaka1166

Inspect npm dependencies, export CycloneDX and SPDX SBOMs, find outdated packages, vulnerabilities, licenses, and package-lock details from the VS Code sidebar.

CodeGuard AI STUDIO

Ayushman

Your AI-powered code review and security assistant. Analyze code changes, detect vulnerabilities, explain risks, and get intelligent fix suggestions directly inside Visual Studio Code.

manan-kanchu — AI Code Detector

sergioide007

Detect AI-generated code, scan vulnerabilities, audit policies, and protect your codebase with multi-provider AI intelligence.

Coderwodar – AI Security Scanner

AbdulMateenQamar

AI-powered security code analysis and CVE vulnerability detection for your project dependencies. Detects OWASP Top 10, CWE vulnerabilities, and checks npm/pip/NuGet packages against known CVEs. Powered by OpenAI and Supabase.

Find security vulnerabilities in your code as you write it. 210 rules tuned for AI-generated code from Cursor, Lovable, Bolt, Replit, and Claude Code. Runs locally — nothing uploaded.

A Pre-commit Security Vulnerability Detection Tool for Python security scaning which includes taint analysis, CVE detection, sandbox execution, SARIF reporting, and intelligent vulnerability assessment.