code-security

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.

对代码与 Git 改动进行本地静态安全检查，并追踪修复结果。

Learn to code securely while having fun through our popular open source in-editor experience, designed for developers, students, and anyone curious about security. Get started for free in under 2 minutes, playing right from your browser.

Adversarial LLM security audits for GitHub PRs and repos via Cloudflare Workers AI + AI Gateway (advisory CI layer, MIT).

Static analysis scanner tuned to vulnerability patterns AI coding assistants tend to introduce.

ZCode（智谱/Z.ai 桌面端）未经授权打包上传用户代码库——30秒检测与一键禁用 | Detect & disable ZCode's silent workspace snapshot upload

Public CLI for deterministic security scanning of AI-generated applications

"A comprehensive Manifest V3 Chrome Extension for dynamic web application security assessment, exposed credential scanning, DOM analysis, security headers auditing, and live code snippet inspection."

Encode your HTML, CSS, and JavaScript into encrypted-style strings with our free online tool. Obfuscate your source code to prevent easy copying and improve basic protection.

AI-powered code security scanner. npm install -g vulnhunter. Trained on 500+ real vulnerability samples.

A GitHub Security Lab initiative, providing an in-repo learning experience, where learners secure intentionally vulnerable code. [CLONE/TEMPLATE]

Safe-Paste is a developer-focused tool that ensures you never leak sensitive information when sharing code. It scans your pasted content for secrets, tokens, credentials, and confidential values, then redacts or replaces them with safe placeholders. Ideal for AI prompts, documentation, issue reports, and public chats.

ESLint backbone repository for workshop