What problem does it solve?
Security-focused differential analysis that identifies regressions, prioritizes risk, and produces a concrete, evidence-backed markdown report so reviewers can decide whether to approve, block, or require remediations before merge or deployment.
Core Features & Use Cases
- Risk-first differential review: focus on auth, crypto, payments, external calls, and validation changes.
- Evidence-backed findings: per-file risk scoring, git blame for removed code, and test coverage checks.
- Blast radius & adversarial modeling: count callers, classify impact, and build concrete exploit scenarios for high-risk changes.
- Output-driven reporting: produce a structured markdown report with severity, file-level details, attack scenarios, and remediation recommendations for PRs, commit ranges, and pre-deploy diffs.
- Use Case: Run on a pull request that touches authentication and payment code to surface regressions, calculate blast radius, and generate blocking remediation steps.
Quick Start
Run a security-focused differential review on PR 42 and produce a markdown report listing findings, severity, blast radius counts, test coverage status, and recommended remediations.