Enhance your workflow with extensions

Find and fix security and compliance issues in Terraform, AWS Cloudformation, ARM templates, Kubernetes, and more

A single tool for securing IaC, container images and open source software across all modern architectures and software supply

Detect policy violations across Infrastructure as Code and programmatically fix them with automated pull requests

Find & fix security vulnerabilities as code is written

Simpler AppSec awaits you

webtechnicom Twilio API Communication Service

The GitHub bot that automates testing, in your codebase

The code analysis tool for the python language

Powerful, completely free GitHub App that automatically analyses your pull requests and provides valuable insight

Automatically create docs for your cross repo PRs and changes

Extracts TODOs from commits and creates GitHub issues automatically

Automatic Solidity security scanning for every pull request. Finds vulnerabilities, maps to SWC, references real exploits

WCAG Code Accessibility

The all-in-one security scanner for AI. Detect malware in models, prompt injections in RAG data, and secrets in notebooks

9-engine code security scanner with AI noise filtering. Free for public repos