Semgrep Assistant, a set of surgical AI tools for AppSec
Heya HN, excited to show off what I've been privately calling an AI cybersecurity tool built by AI skeptics. Two years ago we started a series of experiments with this philosophy of identifying small pieces of cognitive work where a human can very clearly map out the input data they need and the algorithm they'd follow to make a decision. This idea came partly out of frustration with the zeitgeist involving throwing broad AI features (e.g. useless chat bots) into products that end up unreliable and are targeting no clear problem a user might actually have. It feels kind of like a machete vs.…
Semgrep Assistant, a set of surgical AI tools for AppSec launched on January 22, 2025 with 8 votes, #2,695 of 6,141 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 1 year on.
What it does
Semgrep Multimodal combines AI reasoning with rule-based analysis for detection, triage, and remediation.
Ready to move off legacy AppSec? The New Shift Program helps you switch from Checkmarx or Snyk . Semgrep Multimodal combines AI reasoning with rule-based analysis for detection, triage, and remediation. Semgrep Multimodal detects the false positives that static analysis alone could never catch by understanding the mitigating context around a finding. Multimodal reduces the number of findings you need to triage by 20% the day you turn it on, and improves over time as it learns from triage decisions. After filtering out the noise, give developers tailored, step-by-step remediation instructions in their PRs - so real findings are fixed before security teams ever see them. Multimodal turns…from semgrep.dev
In the maker’s words, at launch
Heya HN, excited to show off what I've been privately calling an AI cybersecurity tool built by AI skeptics. Two years ago we started a series of experiments with this philosophy of identifying small pieces of cognitive work where a human can very clearly map out the input data they need and the algorithm they'd…
Does a similar job
all alternatives →
We post-trained a model that pen tests instead of refusingJun 2026 · argusred.com · ▲93Anthropic and OpenAI's publicly available models are explicitly guard-railed so that they refuse offensive tasks. And their cyber-focussed models are gated for enterprises. This leaves SMEs and mid market open to major vulnerabilities. AI can be used as both an adversarial and defensive tool in the world of cyber. A worst case outcome is if only the adversaries have access. Meanwhile, most existing AI cyber tools are just wrappers. The problem is that they still have all the guardrails on from the foundation model where they will inherit its refusals. For this project we've post-trained a…
Cyber Agent Exchange – AI Talent Hub2025 · cyberagent.exchange · ▲13AI-Powered Cybersecurity Talent Marketplace
Hexar.ai2025 · hexar.ai · ▲15Hello Folks, since quite a while we had been working on an interesting problem which we have experienced and is known industry wide. As someone who works in autonomous robotics, we’ve seen how hard it is to debug hardware + software + behavior when systems fail in the field. Logs aren’t enough. Docs are scattered. People waste time hunting instead of fixing. Also leadership and development teams lacks track of what's the ground-level situation. This all info will be at one place. I'm super excited to finally share Hexar.ai, a canvas based intelligent tool we've been building to help teams…
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 22d ago · stillwet.art
FastRouter.ai▲364Route requests to the right LLM for cost, latency & quality
AI · 23d ago · fastrouter.ai
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, January 2025
the whole month →
Hello! I'm Byran. I spent the past ~6 months engineering a laptop from scratch. It's fully open-source on GH at: https://github.com/Hello9999901/laptop
Dev tools · 2025 · byran.ee
- TITetris in a PDF▲1,289
I realized that the PDF engines of modern desktop browsers (PDFium and PDF.js) support JavaScript with enough I/O primitives to make a basic game like Tetris. It was a bit tricky to find a union of features that work in both engines, but in the end it turns out that showing/hiding annotation "fields" works well to make monochrome pixels, and keyboard input can be achieved by typing in a text input box. All in all it's quite janky but a nice reminder of how general purpose PDF scripting can be. The linked PDF is all ASCII so you can just open it in a text editor, or have a look at…
Life & fun · 2025 · th0mas.nl
21st.dev▲1,211I originally built this app to organize and reuse interesting React + Tailwind components I came across on Twitter, inspired by the shadcn/ui approach. Later, a friend started contributing their own components, and it got me thinking—this could grow into something bigger, like an NPM for design engineers to share and use components. Would love to hear your thoughts!
Dev tools · 2025 · 21st.dev
Create lifelike, personalized AI avatars from text prompts
AI · 2025 · jogg.ai
CSS library based on Counter Strike 1.6 UI.
Life & fun · 2025 · cs16.samke.me