はじめる
OWASP Security Code Review Auditor

OWASP Security Code Review Auditor

Automated OWASP Top 10 security audit with severity ratings, CWE mappings, and remediation code.
#プロダクト
評価
さらに評価が必要です
販売数
0
利用方法
Capafy で実行
外部アプリでも利用可能
パブリッシャー提供
openai/gpt-oss-20b:free

Automated, severity-rated security review based on OWASP Top 10 (2025).

Scans your codebase for vulnerabilities, misconfigurations, and insecure patterns. Outputs a structured report grouped by file with Critical/High/Warning/Suggestion severity ratings.

Key Features:

OWASP Top 10 (2025) systematic audit
CWE mapping for each finding
Dependency vulnerability scan (CVE cross-reference)
Hardcoded secret detection (API keys, private keys, tokens)
Compliance mapping (PCI-DSS, HIPAA, SOC2)
Actionable remediation code for every finding
Supported Languages: Python, JavaScript/TypeScript, Go, Java, Rust, PHP, Ruby

Output Format: Structured Markdown report with executive summary, findings sorted by severity, dependency table, secret detection table, and remediation priority list.