SecureRabbit is an advanced security code analysis tool that combines static analysis with AI-powered deep reasoning to detect OWASP Top 10 vulnerabilities in your codebase.
# Install
go install github.com/deepam02/securerabbit/cmd/securerabbit@latest
# Initialize configuration
securerabbit init
# Run your first scan
export OPENAI_API_KEY="your-api-key"
securerabbit scan --mode smart- 🔍 Hybrid Analysis Engine - Combines static rules with LLM intelligence
- 🤖 Multi-LLM Support - Works with OpenAI, Anthropic Claude, and Google Gemini
- 🎯 Smart Scanning - Prioritizes high-risk files for efficient analysis
- 📊 Multiple Scan Modes - Deep, Smart, and Git Diff scanning
- 🛡️ OWASP Top 10 Coverage - Comprehensive security vulnerability detection
- 📝 Flexible Reports - JSON and Markdown output formats
- ⚡ Fast & Concurrent - Parallel processing for large codebases
Comprehensive documentation is available in the docs/ directory:
- 📘 Getting Started - Installation, setup, and your first scan
- 📗 Usage Guide - Complete command reference and examples
- 📙 Configuration - Configure LLM providers, rules, and output
- 🔒 Security - Best practices, API key management, and compliance
- Pre-commit Hooks - Catch vulnerabilities before they reach your repository
- CI/CD Pipelines - Automated security scanning in your build process
- Code Reviews - AI-assisted security review for pull requests
- Security Audits - Comprehensive analysis of existing codebases
- Developer Training - Learn secure coding practices through detailed findings
- ✅ Go (with AST analysis)
- ✅ Python
- ✅ JavaScript/TypeScript
- ✅ Java
- ✅ C/C++
- ✅ C#
- ✅ Ruby
- ✅ PHP
# SecureRabbit Security Scan Report
**Generated:** 2024-12-06 14:30:45
## Summary
- Files Scanned: 42
- Total Findings: 8
- Critical: 2 | High: 3 | Medium: 2 | Low: 1
### Critical Issues
🔴 Hardcoded AWS Access Key (Line 45)
🔴 SQL Injection Vulnerability (Line 123)We welcome contributions! Please check out the documentation and feel free to open issues or submit pull requests.
MIT License - see LICENSE file for details.
Developed by @deepam02
Need Help? Check out our Getting Started Guide or open an issue.