OSV.dev Security Analyzer

Tree-sitter

Enhance your code analysis with tree-sitter parsing, facilitating structured comprehension and editing of code in various programming languages. Ideal for activities such as code evaluation, optimization, and report creation.

FileScope

Gain insights into codebases by detecting key files through dependency analysis, offering a structural overview of projects with prioritized importance levels and visual aids to enhance development support.

Gemini Code Analysis (OpenRouter)

Unlock powerful insights into your JavaScript or TypeScript projects with the Model Context Protocol (MCP). Conduct thorough codebase analysis, receive detailed code quality evaluations, pinpoint security vulnerabilities following OWASP Top 10 standards and CVE database alignment, optimize performance profiling, and access automated solutions for enhanced code integrity. Integrate seamlessly with OpenRouter's API for a comprehensive development experience.

Semgrep

Enhances code security and quality by utilizing Semgrep's static analysis tool to scan for vulnerabilities and coding errors. This integration empowers developers to detect and resolve issues seamlessly during their coding process.

Coding File Context

Enhance your file system navigation and code analysis with cutting-edge features for seamless codebase exploration, automated quality assessment, and smart code browsing. Ideal for efficiently scanning and understanding extensive code repositories.

Swagger Explorer

Enhance your API exploration experience with a cutting-edge Model Context Protocol (MCP) that analyzes and engages with Swagger/OpenAPI blueprints. This protocol empowers developers by facilitating endpoint filtration, dynamic API investigation, and thorough schema authentication, especially beneficial when handling unfamiliar API environments.

Code Analysis

Enhance your development workflow with a cutting-edge protocol that combines code analysis and scraping features. Empower your team with tools for code review, static analysis, and automated suggestions for refactoring.

Snyk

Seamlessly connects to Snyk CLI for scanning security vulnerabilities in GitHub repositories and Snyk projects during conversations. Empowers developers to detect code security issues without interruptions.

Web Security Scanner

Achieve automated testing for identifying XSS and SQL injection vulnerabilities using Playwright-driven browser automation. Capture screenshots and proficiently manage errors for thorough web security assessment.

CodeQL

Enhance your codebase's security and quality with seamless integration to the powerful CodeQL static analysis engine. Identify vulnerabilities and enhance code quality through advanced query evaluation and result analysis.

MobSF

Enhance your mobile app security with seamless integration with MobSF (Mobile Security Framework). Conduct automated analysis of APK, IPA, and APPX files to detect vulnerabilities, generate comprehensive reports, and perform comparative assessments. Step up your security game with this cutting-edge Model Context Protocol feature.

Security Audit

Discover vulnerabilities in Node.js project dependencies by leveraging npm-audit-report and npm-registry-fetch within the Model Context Protocol (MCP). Gain valuable security insights and actionable recommendations to enhance your development process.

Solodit

Explore a cutting-edge Model Context Protocol (MCP) that seamlessly interacts with Solodit's robust vulnerability repository, enabling swift access to comprehensive smart contract security audit results. Uncover detailed vulnerability assessments that encompass impact severity, audit agency particulars, and in-depth technical insights crucial for conducting thorough security evaluations and analyses.

DefectDojo

Integrate seamlessly with the DefectDojo vulnerability management platform to streamline security workflows by connecting security findings, products, and engagements through the Model Context Protocol (MCP).

Project Explorer

Explore TypeScript and JavaScript projects confidently with the Model Context Protocol (MCP). Enhance your codebase management with secure file system navigation, regex-based file search, efficient file handling, package dependency evaluation, and customizable directory permissions.