security-audit-agent

Run a security audit on your repository root to identify SQL injection, XSS, CSRF, and OWASP Top 10 vulnerabilities. It analyzes source code, configurations, and dependencies, generating a prioritized report with severity ratings and remediation steps.

Scanning for hardcoded secrets and insecure dependencies involves analyzing configuration files and dependency manifests to flag exposed credentials, improper environment variables, and outdated libraries, producing a report with exact locations and remediation recommendations.

Yes, you can check code for PCI-DSS and HIPAA compliance gaps. The security audit assesses authentication flows, access control logic, and configuration settings, mapping identified vulnerabilities to specific compliance standards within the final report.

Reviewing authentication and authorization logic for privilege escalation risks requires analyzing session handling, token management, and access control flows to detect misconfigurations, producing a prioritized assessment with specific code locations and remediation examples.

Yes, security auditing works with API definitions and backend configuration files. It scans these resources alongside source code and dependency manifests to detect insecure server settings, improper environment variable usage, and authentication misconfigurations.

A code security audit report includes prioritized findings with severity ratings, exact code locations, remediation examples, and compliance mappings. It covers vulnerabilities, hardcoded secrets, and misconfigurations found across the codebase to help teams remediate risks.