Argus, an open-source security scanner that orchestrates 20+ industry-standard tools including Semgrep, Trivy, Gitleaks, tfsec, Checkov, and OWASP ZAP behind a single command and an MCP server, is now…
A developer built Wardrail, an open-source scanner that checks for API-key leaks and security risks in vibe-coded projects. The tool scans Git history, MCP configuration, and Agent instruction files f…
A developer found that AI coding assistants like Cursor, Copilot, Lovable, and Bolt generate code with security flaws such as hardcoded API keys, permissive CORS settings, and missing input validation…
AI coding assistants like Cursor, Claude Code, Copilot, and Windsurf frequently generate code with hardcoded secrets (CWE-798), such as API keys and database credentials, because their training data i…
A developer released CommitGate, a pre-commit code scanner that automatically checks staged changes for security vulnerabilities using Gitleaks and an AI API. The tool aims to help developers catch is…
A developer who has run both approaches in production environments from a 5-person startup to a 200-developer platform org compares AI-based secret scanning with traditional regex-based tools in CI pi…