How I Built an AI Security Auditor That Streams AST Fixes (151 Users in 3 Days)

A developer has built BugZ, an autonomous security auditor that analyzes code and generates immediate, actionable fixes. Unlike traditional SAST tools that dump static logs, BugZ parses AST nodes and streams real-time reasoning to the UI, auto-generating downloadable Git patch files. The tool gained 151 users in three days after being built in public.

Most Static Application Security Testing SAST tools give you a massive wall of text. They flag OWASP vulnerabilities, but leave you searching line-by-line to manually apply fixes. To solve this, I spent the last few weeks building BugZ —an autonomous security auditor designed to analyze code and generate immediate, actionable fixes. Instead of dumping static logs, BugZ parses AST nodes and streams real-time reasoning directly to the UI. Once a flaw is detected, it auto-generates a downloadable Git .patch file so you can fix your code instantly. Apply a fix generated by BugZ in one command git apply security-fix.patch Building in public and focusing on a genuine developer pain point brought in awesome early validation: Run a free audit on your repositories: 👉 bugz-ai.vercel.app https://bugz-ai.vercel.app I'd love your feedback Test it on your repos, roast the UI/UX, or let me know what features you'd like to see next in the comments below 👇