Free local security checks for AI coding in VSCode, Cursor and Windsurf
Hi HN! We just launched Codacy Guardrails, an IDE extension with a CLI for code analysis and MCP server that enforces security & quality rules on AI-generated code in real-time. It hooks into AI coding assistants (like VS Code Agent Mode, Cursor, Windsurf), silently scanning and fixing AI-suggested code that has vulnerabilities or violates your coding standards, while the code it’s being generated. We built this because coding agents can be a double-edged sword. They do boost productivity, but can easily introduce insecure or non-compliant code. One recent research team at NYU found that 40%…
Free local security checks for AI coding in VSCode, Cursor and Windsurf launched on June 18, 2025 with 43 votes, #573 of 7,999 launches that month and more than 90% of that year's launches.
In plain words
Codacy Guardrails is an IDE extension and CLI tool that analyzes AI-generated code in real-time within VS Code, Cursor, and Windsurf. It scans code suggestions from AI assistants for security vulnerabilities and quality issues, automatically fixing problems before code is committed. The tool enforces custom coding standards and integrates with open-source static analyzers. It's designed for developers who use AI coding assistants and want to prevent insecure or non-compliant code from being introduced during development.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
Hi HN! We just launched Codacy Guardrails, an IDE extension with a CLI for code analysis and MCP server that enforces security & quality rules on AI-generated code in real-time. It hooks into AI coding assistants (like VS Code Agent Mode, Cursor, Windsurf), silently scanning and fixing AI-suggested code that has…
Does a similar job
all alternatives →
- WAWindsurf – Agentic IDE2024 · codeium.com · ▲101
At Codeium, we've been building AI-powered extensions for a while (we first launched our VSCode extension with autocomplete a little over 2 years ago!), but we've always thought there would come a day where we would hit the limits of what could be achieved within existing IDEs, so we decided to build our own: Windsurf (yes, it's yet another VSCode fork :) We've stuffed a lot of cool features into Windsurf—a super fast autocomplete model, an inline diff generation experience that feels truly native, but we're most proud of Cascade, which is an evolution of the sidebar chat experience that…
AI Coding Agent Guardrails enforced at runtimeApr 2026 · sigmashake.com · ▲5As a Security Engineer with over 10+ years in industry, I kept running into the same problem with coding agents: Instructions are not guarantees. I put guidance in `CLAUDE.md`, `AGENTS.md`, memory files, MCP descriptions, and tool documentation. I explicitly told the agent things like: - Use the code graph for architecture questions instead of grepping the repository. - Do not use deprecated APIs or Unsafe code. - Prefer specific tools for specific tasks. The agent would still ignore those instructions surprisingly often. It would grep the entire repo, use deprecated APIs, or choose a slower…
We built an AI to review your pull requests2025 · infinitcode.ai · ▲53Hey HN, We’re two developers (co-founders) with a team of 20 who got tired of spending hours reviewing PRs, so we built Infinitcode.ai, an AI-powered code reviewer that: - *Summarizes PRs in plain English*: No more deciphering 1,000-line diff jungles - *Catches more than bugs*: Security holes, performance pitfalls, code smells, even typos (yes, we’ll flag “vurnerabilities” and vulnerabilities) - *Zero onboarding*: Works instantly—no “let me learn your codebase for weeks” nonsense. Why we’re posting: We’re in alpha and need brutal honesty. Roast our tool, mock our UI, or tell us why AI will…
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 20d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 28d ago · world.pixverse.video
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, June 2025
the whole month →- IM
Hey HN! Pilots everywhere are required to keep a logbook of all their flying hours, aircraft, airports, and so on. Since I track everything digitally (some people still just use paper logbooks!), I put together some data visualizations and a few 3D globes to show my flying history. This globe is probably my favourite so far: https://jameshard.ing/pilot/globes/all If you’ve got ideas for other graphs or ways to show this kind of data, I’d love to hear them!
Life & fun · 2025 · jameshard.ing
Stunning presentations with AI. No design skills required.
AI · 2025 · chroniclehq.com
Build native mobile apps for iOS and Android without code.
Dev tools · 2025 · bble.io
All your connections, across all your socials.
AI · 2025 · pally.com
I was the main contributor to workout.lol, an open-source fitness app to easily build a workout routine. The project had traction (1.4k GitHub stars, 95 forks, ~20K visits/month), but was eventually sold due to video licensing hurdles. The new owner stopped maintaining it, and the repo went abandoned. Over the next 9 months, I sent 15 emails to try to save it : no replies. Feature requests & issues were ignored. The community was left with a "broken" tool let's say. I couldn't just let it die So I built the new version from scratch with the same open-source spirit, but a better…
Dev tools · 2025 · github.com