Security

Comprehensive website security audit covering vulnerabilities and misconfigurations.

Static analysis toolkit with CodeQL, Semgrep, and SARIF result processing for security auditing.

Find similar vulnerabilities across codebases via pattern-based analysis.

Create and refine custom Semgrep rules for automated vulnerability detection.

Smart contract security toolkit with vulnerability scanners for 6 blockchains.

Security-focused diff review with git history analysis for code changes.

Property-based testing for multiple languages and smart contracts.

Review code for language-specific security vulnerabilities with automated checks.

Generate repo-specific threat models identifying trust boundaries and attack surfaces.

Security skill suite with drift detection, automated audits, and skill integrity verification.

OWASP Top 10:2025, ASVS 5.0, and agentic AI security checklists for 20+ languages.

Secure environment variable management — secrets never appear in sessions, logs, or git.