What problem does it solve? Security reviews of a full codebase are slow and error-prone when done manually, and critical issues like missing auth checks, leaked secrets, or misconfigured CORS headers are easy to miss before launch. ## Core Features & Use Cases - Multi-Agent Security Audit: Spawns four parallel audit teammates covering authentication/authorization, input validation and injection, data exposure and privacy, and infrastructure security (headers, CORS, CSP, dependencies, rate limiting). - Automated Vulnerability Fixing: Applies fixes directly in code with traceable comments, runs the full test suite to prevent regressions, and escalates unfixable architectural issues as blocking decisions. - Compliance Reporting: Produces a BRD security requirement compliance matrix, severity-classified findings, and a machine-parsable gate decision (PASS / CONDITIONAL PASS / FAIL) for pipeline gating. - Use Case: Before deploying a new SaaS product, run the audit to verify every backend endpoint enforces auth, scan git history for leaked secrets, check dependency CVEs, and receive a launch-blocking report if critical flaws remain. ## Quick Start Ask the assistant to run a security audit of the codebase and fix any vulnerabilities it finds.
