Auditor Core
Your vulnerability scanner is lying to you
What it does
Most security scanners dump hundreds of alerts and call it a report. No context, no prioritization, just noise developers learn to ignore. Auditor Core runs 10 detection engines simultaneously — Bandit, Gitleaks, IaC, CICD, SCA and more — normalizes findings through WSPM v2.2, and delivers a single calibrated Security Posture Index (SPI). AI advisory via Gemini 2.5 Flash verifies findings and eliminates false positives. Groq fallback ensures zero interruption. One command:/audit /your/project
Does the same job
all alternatives →- LELogira – eBPF runtime auditing for AI agent runsMar 2026 · github.com · ▲26
I started using Claude Code (claude --dangerously-skip-permissions) and Codex (codex --yolo) and realized I had no reliable way to know what they actually did. The agent's own output tells you a story, but it's the agent's story. logira records exec, file, and network events at the OS level via eBPF, scoped per run. Events are saved locally in JSONL and SQLite. It ships with default detection rules for credential access, persistence changes, suspicious exec patterns, and more. Observe-only – it never blocks. https://github.com/melonattacker/logira
- IBI built a PR listener and ruleset to detect malicious code in CI/CD2025 · github.com · ▲13
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
- TOTheAuditor – Offline security scanner for AI-generated codeSep 2025 · github.com · ▲13
I'm an infrastructure architect who started using AI assistants to write code 3 months ago. After building several systems with Claude, I noticed a pattern: the code always had security issues I could spot from my ops background, but I couldn't fix them myself since I can't actually write code. Why I built this: I needed a way to verify AI-generated code was production-safe. Existing tools either required cloud uploads (privacy concern) or produced output too large for AI context windows. TheAuditor solves both problems - it runs completely offline and chunks findings into 65KB segments that…
LGTM — Looks Good To MeowJul 2026 · looksgoodtomeow.in · ▲12Security-first AI that reviews entire repo, not just diffs
- AMAIOps MCP – Log anomaly detection using Isolation Forest2025 · github.com · ▲6
I built an open-source AIOps MCP (Monitoring & Control Plane) that detects anomalies in logs using Isolation Forest. It accepts logs from agents, apps, or collectors, parses and extracts features, and identifies unusual patterns in real time. Alerts can be sent to Slack, Webhooks, or PagerDuty. It’s lightweight, easy to deploy with Kubernetes & Helm, and designed to plug into existing observability stacks. I built this to experiment with combining ML-based anomaly detection and flexible alerting for DevOps/SRE teams. Most AIOps platforms are either too heavyweight or closed-source — I…
More dev tools this month
the category →
The first open-source price index for GPU compute
Dev tools · 10d ago · getcomputable.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 2d ago · opentrailpaper.com
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
Launched alongside, March 2026
the whole month →
Switch from ChatGPT to Claude with import memory feature
AI · Mar 2026 · claude.com
