DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

react typescript ai developer-tools code-review code-quality security-scanner devsecops vulnerability-scanner sast xai code-audit vite bug-detection supabase llm google-gemini

• Updated Nov 1, 2026
• Python

Source Code Security Audit (源代码安全审计)

security-audit cobra security-scanner security-tools sourcecode-analysis code-audit

• Updated Sep 16, 2022
• Python

☕️ Java Security，安全编码和代码审计

code-audit java-sec java-vul

• Updated Mar 7, 2025
• Java

Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.

react agent security-audit multi-agent penetration-testing cve vulnerability-detection security-tools source-code-analysis vulnerability-research code-audit ai-security fastapi llm-agent

• Updated Oct 1, 2026
• Python

Open-Source Security Architecture | 开源安全架构

security security-audit ids application-security security-vulnerability vulnerabilities ips vulnerability-scanners security-scanner security-tools code-audit business-security

• Updated May 10, 2021

JavaSecLab is a comprehensive Java vulnerability platform｜​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

java security sdl owasp web-security ctf security-training iast devsecops java-security sast code-audit java-vulnerability vulnerability-lab

• Updated Jun 9, 2026
• Java

DianXing - AI-Driven End-to-End Code Security Auditing

security security-audit static-analysis penetration-testing rce appsec vulnerability-detection devsecops vulnerability-scanner sast code-audit ai-security code-security smart-contract-security ai-code-review

• Updated Jun 24, 2026

🔍 CodeAuditAssistant - JetBrains Code Audit Plugin (Beta) ⚡ Deep Call-Chain Tracking | 🚀 Method/Class Search | 🔥 Prebuilt Vuln Sinks Native Integration | Decompiler/Path Finder | Memory Optimized 🔍 CodeAuditAssistant - IDEA代码审计插件 ⚡ 精准追踪复杂调用链 | 🚀 毫秒级方法搜索 | 🔥 内置高危漏洞检测 原生集成 | 反编译/路径分析 | 内存优化 | 安全审计利器

idea-plugin java-security code-audit

• Updated Mar 14, 2026
• Kotlin

Autonomous white-hat security auditor for AI-driven code review, bug bounty research, exploit construction, and execution-grounded verification.

security security-audit smart-contracts audit solidity bug-bounty evm zk autonomous-agents zero-knowledge security-automation white-hat exploit-development vulnerability-research code-audit

• Updated Oct 5, 2026
• TypeScript

An AI-powered GitHub code review tool that uses LLMs to detect high-confidence, high-impact issues—such as security vulnerabilities, bugs, and maintainability concerns.

github python ai static-analysis code-analysis developer-tools code-review software-engineering code-quality codereview code-audit github-actions github-copilot llm ai-code-review ai-coding-tools ai-code-reviewer ai-coding ai-coding-assistant ai-code-analysis

• Updated Oct 1, 2026
• Python

Open-Source Security Reports, Made Simple - 100% free. No paywalls, just actionable insights.

security security-audit dependencies vulnerability-scanner code-audit security-report

• Updated Nov 3, 2026
• HTML

Claude Code plugin for Java JAR security audit — 基于 jar-analyzer 的 Claude Code 安全审计插件，构建数据库，AI 深入分析

security-audit vulnerability code-audit claude-code-plugin jar-analyzer

• Updated Mar 20, 2026

sdlc_python 是一个基于python语言构建的devsecops平台，旨在促进 DevSecOps 和安全开发生命周期 (SDLC) 实践。它通过模拟常见漏洞来增强开发人员的安全意识(对应sdlc中对开发人员的安全培训)，并且使用了大模型进行代码安全审计（对应sdlc中代码审计阶段），帮助企业进行安全左移。除了用于 DevSecOps 实践外，sdlc_python 还可以用于学习漏洞知识、渗透测试和代码审计。本项目采用了前后端分离的设计模式，其中后端利用了轻量级框架 Flask，而前端则使用了 Vue 3。

scanner sec sdlc security-tools devsecops code-audit

• Updated Feb 23, 2025
• Python

Evidence-driven Java security review workbench

javascript education security security-audit spring-boot static-analysis developer-tools vulnerability-detection security-tools sast code-audit codeql semgrep

• Updated Oct 12, 2026
• Python

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

security ai pipeline static-analysis cybersecurity bug-bounty bugbounty appsec vulnerability-detection cyber-security fault-localization codex security-tools claude sast code-audit ai-security ai-pipeline llm agentic-ai

• Updated Nov 11, 2026
• Python

🐛 A plug-in of sublime 2/3 which is able to find PHP vulnerabilities

php sublime vulnerability web-security sublime-text-plugin code-audit

• Updated Jun 14, 2018
• Python

sofagent is an open-source FDE Harness for AI coding agents — on entry, write your business judgment into files (workflows, ontology, AI nodes); after departure, audit every change against them. 28 codified audit rules, tamper-evident chain, snapshots, and an MCP toolset (104 tools, 12 plugins). Everything can be FDEing.

typescript mcp pre-commit ontology git-hooks compliance harness dsh ai-safety ai-agents code-audit ai-security secret-scanning ai-engineering llm enterprise-ai llm-governance agent-governance openclaw agent-audit

• Updated Nov 12, 2026
• TypeScript

Local-first code audit workbench for Opengrep. Scan locally, track findings across versions, verify fixes, and produce reproducible security audit reports.

docker static-analysis sarif security-tools sast code-audit local-first opengrep

• Updated Nov 12, 2026
• TypeScript

Java bytecode analysis engine built on ASM, extracts method call graphs, inheritance trees, Spring routes, and string constants from JAR/WAR into SQLite. AI-friendly output for security auditing.

bytecode static-analysis java-bytecode call-graph code-audit java-asm

• Updated Mar 20, 2026
• Java

Codeaudit - Modern Python source code security analyzer based on distrust.

python security static-analysis audit owasp appsec python-security vulnerability-scanners vulnerability-assessment code-scanning security-testing sast complexity-measure sourcecode-analysis code-audit codeanalyzer code-auditing code-security sldc code-security-audit

• Updated Nov 10, 2026
• Python