A comparison of Snyk and BrassCoders shows that Snyk specializes in Software Composition Analysis (SCA) by scanning dependency files like requirements.txt to find CVEs in third-party packages, while B…
BrassCoders writes a plain YAML file, .brass/ai_instructions.yaml, after each scan of a Python codebase, containing severity-sorted findings with file paths, line numbers, and remediation notes. The f…
BrassCoders treats every developer's code the same way by running 12 static-analysis scanners and emitting the union of their findings as YAML, catching vulnerabilities that AI assistants miss. The to…
BrassCoders finds that AI-generated Python code using SQLAlchemy's text() function with f-strings or % formatting introduces SQL injection vulnerabilities, as the ORM's automatic parameterization is b…
BrassCoders, a security scanner designed to catch what AI assistants structurally miss, integrates into developer workflows through three checkpoints: a local CLI install, a pre-commit hook, and a CI …
BrassCoders released a template for an AI code review policy designed to help engineering teams formalize their review process for AI-assisted code. The policy covers technical gates, human review req…
BrassCoders finds that autonomous coding agents, such as Claude Code and SWE-agents, bypass human code review, allowing security vulnerabilities like hardcoded credentials to go undetected. The compan…
BrassCoders has developed a code review system that runs static analysis before invoking an AI model, based on research showing deterministic scanners and LLMs solve different problems. The pre-pass r…