security-advisor

To identify security vulnerabilities in code before a merge, run an automated review against your pull request to detect risks in source code and generate a Security Review Report with severity-based findings and remediation guidance.

A security architecture review evaluates the security of system design and deployment configurations. You need it during the design phase to support risk-based decision making and prevent security issues from shipping to production.

Yes, you can verify code compliance against security standards and policies during a pull request review. The process checks alignment with security policies and outputs compliance results alongside risk assessment findings.

Assess security risks in system architecture by evaluating system design and deployment configs against risk-based criteria. This classifies findings by severity and provides remediation guidance for secure-by-default configurations.

The best way to document security findings is to generate a Security Review Report that classifies vulnerabilities by severity, verifies compliance, and provides actionable remediation guidance for secure-by-default configurations.