A developer created an AppSec prompt that found four security gaps in open-source projects, including an authorization flaw affecting one of 174 routes. The prompt enforces a contract that limits what…
VibeGuard v1.0.0, a security linter built specifically for AI-generated code, has been released on GitHub by developer zeroFhacker. The tool runs 47 AI-pattern rules to detect vulnerabilities commonly…
Velonus released an open-source CLI that merges five Python security scanners—Bandit, pip-audit, Safety, Semgrep, and detect-secrets—into a single deduplicated tool, with the core scanner and normaliz…
A developer has launched Cutthroat News, a service that uses AI to generate two personalized news digests per day, replacing 60-90 minutes of daily news reading with a few minutes. The system, built w…
Anthropic shipped the Claude Security Plugin for Claude Code in public beta on July 22, a multi-agent vulnerability scanner that runs in the terminal and finds bugs that rule-based tools like Semgrep …
Velonus has launched in beta, offering a developer tool that runs multiple security scanners in a single parallelized pass with AI-ranked findings and one-click fix pull requests. The tool supports Ba…
Getdebug CLI 0.4.0 adds Python AI-app regex prefilters for five categories (prompt-injection, unsafe-role-merge, pii-in-prompt, unbounded-stream, unsafe-tool-output), running in milliseconds with no L…
A comparison of Snyk and BrassCoders shows that Snyk specializes in Software Composition Analysis (SCA) by scanning dependency files like requirements.txt to find CVEs in third-party packages, while B…
BrassCoders treats every developer's code the same way by running 12 static-analysis scanners and emitting the union of their findings as YAML, catching vulnerabilities that AI assistants miss. The to…
BrassCoders finds that AI-generated Python code using SQLAlchemy's text() function with f-strings or % formatting introduces SQL injection vulnerabilities, as the ORM's automatic parameterization is b…
BrassCoders released a template for an AI code review policy designed to help engineering teams formalize their review process for AI-assisted code. The policy covers technical gates, human review req…
A developer released model-due-diligence, an open-source Python CLI tool that performs static supply-chain security checks on local AI model files and repositories before they are imported into runtim…
A developer benchmarked four Python AI-application security scanners—Bandit, Semgrep, vulnhuntr, and getdebug—against ten hand-written Python fixtures and the simonw/llm codebase. Getdebug achieved 10…