isitsecure: a web application vulnerability scanner featuring SAST, DAST, and AI

A new project called isitsecure has appeared on GitHub, with the goal of simplifying the process of finding and fixing vulnerabilities in web applications. According to the author’s vision, the tool runs with a single command and combines several security analysis approaches at once.

What the scanner can do

• SAST (static source code analysis) — searches for issues at the code level without running the application.
• DAST (dynamic analysis)—tests an application that is already running, checking how it responds to external requests.
• AI analysis — uses an LLM to guide developers without specialized cybersecurity expertise on how to fix the issues found.

The project is primarily aimed at those who are not security specialists but want to quickly check their code before release. The repository contains demo examples, a test application, benchmarks, and documentation.

The source code and installation instructions are available in the GitHub repository.

Source: Hacker News - Newest: ""AI" "LLM""