Get started

OWASP Security Code Review Auditor

by: yan yan

Automated OWASP Top 10 security audit with severity ratings, CWE mappings, and remediation code.

#Produto

Avaliação

São necessárias mais avaliações

Vendas

Como usar

Executar na Capafy

Também em aplicativos externos

Fornecido pelo publisher

openai/gpt-oss-20b:free

Automated, severity-rated security review based on OWASP Top 10 (2025).

Scans your codebase for vulnerabilities, misconfigurations, and insecure patterns. Outputs a structured report grouped by file with Critical/High/Warning/Suggestion severity ratings.

Key Features:

OWASP Top 10 (2025) systematic audit
CWE mapping for each finding
Dependency vulnerability scan (CVE cross-reference)
Hardcoded secret detection (API keys, private keys, tokens)
Compliance mapping (PCI-DSS, HIPAA, SOC2)
Actionable remediation code for every finding
Supported Languages: Python, JavaScript/TypeScript, Go, Java, Rust, PHP, Ruby

Output Format: Structured Markdown report with executive summary, findings sorted by severity, dependency table, secret detection table, and remediation priority list.

Web Security Self-Audit Kit (OWASP)

A lightweight, defense-focused audit of your own/authorized website or web app, driven by the OWASP Top 10. Non-destructively checks security headers, cookie attributes, XSS/SQLi exposure, dependency CVEs, and WordPress/Next.js-specific points. Each finding comes with a severity and an immediately actionable fix (config and code examples), output as a concise report. For full engagements (RoE, formal report), use the Pentest Engagement Kit. Authorized assets only.

US$9

SkillSmith Repo Security Audit

Defensive application-security auditing: turns a repo, manifest, or code snippet into an actionable report—dependency vulnerabilities, leaked secrets, insecure code patterns, and config hardening—mapped to OWASP Top 10 and ranked by severity. Finds risk and the fix only, never attack content.

US$49

ADA Compliance Agent WCAG

Audits local static HTML/CSS against 11 selected WCAG 2.1 AA checks, optionally applies conservative local HTML fixes with .bak backups, and exports JSON/HTML reports. No SSH, remote deployment, or compliance certification.

Free Trial

OWASP Security Code Review Auditor

Agents similares

Web Security Self-Audit Kit (OWASP)

SkillSmith Repo Security Audit

ADA Compliance Agent WCAG