Aikido Security launched Code Audit, a feature using multiple AI agents to perform pentest-grade vulnerability discovery on static source code without requiring a live environment. The tool aims to he…
A developer released model-due-diligence, an open-source Python CLI tool that performs static supply-chain security checks on local AI model files and repositories before they are imported into runtim…
Semgrep's benchmark for AI-powered vulnerability detection shows its Semgrep Multimodal tool finds 3.5x more true positives than a tuned guided prompt at similar precision and lower cost per finding. …
A developer benchmarked four Python AI-application security scanners—Bandit, Semgrep, vulnhuntr, and getdebug—against ten hand-written Python fixtures and the simonw/llm codebase. Getdebug achieved 10…
A developer has released Swarm Audit, an open-source command-line tool that detects when AI-generated pull requests cheat by deleting tests, weakening assertions, or swallowing errors in empty catch b…
OpenGuard is an open-source, self-hosted static code analysis platform that serves as an alternative to tools like SonarQube, enabling developers to scan codebases, track security issues, and manage r…