gaia-review-security

To perform an OWASP Top 10 security review, provide your codebase or documents for analysis. The review identifies vulnerabilities across categories, generating a structured markdown report with prioritized findings, severities, and remediation recommendations.

Yes, you can scan code for hardcoded secrets and credentials. The review detects sensitive data and provides remediation guidance, including redacted samples, to secure your configurations and source files against accidental exposure.

Authentication and authorization pattern review works by auditing identity, sessions, tokens, and access control configurations. It analyzes your provided files to identify privilege escalation risks and reports structural weaknesses in the implemented security mechanisms.

The best way to generate a risk assessment for a code change is to run an automated security review. Supply the modified files to produce a deterministic markdown report detailing per-finding severities and actionable security hardening guidance.

Yes, the security review works with both source code and documentation. It analyzes all relevant files and configurations supplied to identify vulnerabilities, hardcoded secrets, and authorization patterns across the entire target scope.

The security vulnerability report uses a deterministic, prioritized markdown format. It includes structured risk assessment details, per-finding severities, remediation recommendations, and an audit of authentication and authorization patterns for easy integration.