Havuz

Mantis, AI coding agents ile kod tabanlarındaki güvenlik açıklarını araştırma, yeniden üretme ve düzeltme iş akışları kurmaya yönelik modüler bir toolkit ve referans harness sunuyor.

Neden yükseliyor · AI agent’lar ile güvenlik açığı bulma ve düzeltme ilgisinin artması projeye görünürlük kazandırmış olabilir; ancak yalnızca verilen ölçümlerden yükselişin nedenini doğrulamak mümkün değil. 104 günlük yaşında 1717 yıldız dikkat çekici ilgi gösterse de son 28 gündeki 5 commit ve 1 farklı yazar, güncel geliştirme hareketliliğinin sınırlı olduğuna işaret ediyor.

Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own mo

Benzi is code intelligence infrastructure for AI models. It compiles your codebase into a resolved, queryable map of calls, data flow, contr

Agent Reliability Analyzer: deterministic scanner that finds and fixes AI agent reliability failures

Automated quality checks that nudge AI coding agents toward better habits

Verified AI dependency migrations. Finds which of your lines a version bump actually breaks, fixes them, and proves the result still compile

Your AI coding agent is only as reliable as the harness around it. Measure that harness in seconds with harness-score.

Find and govern AI attack surfaces in application code, at PR time and inside your AI coding tool (MCP server, Claude Code hook). Free, OSS,

ER diagrams, N+1 detection, schema drift & migration-risk linting for Django and SQLAlchemy (Alembic) — VS Code, CLI and MCP server. Static

Finds the code your AI wrote twice. Fast, offline duplicate-code detector: scan, history chart, CI gate. No AI required.

Find and repair substance defects in AI-assisted prose, code, docs, and agent output. Reports defects, never authorship. Structural tests ov

LLM-native static vulnerability detection: point it at a repo and get a reviewable vuln report, the way a human auditor would.

Deterministic UI audits for shadcn apps, built for your terminal, your CI, and your AI agent.

Deterministic textlint rules and CLI for catching prose slop in English Markdown.

Repo dependency analyzer with **blast-radius impact scoring** for AI-assisted development.

Local-only Go static analysis engine with a built-in MCP server. Gives AI coding agents deterministic structural awareness: call graphs, imp

Senior-developer discipline for AI coding agents. A commit gate that counts unchecked as failing, quality controllers that refuse to call un

The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]

A pure-Python reachability and skeletonization layer that decides what a coding agent actually sees before a request reaches the API.

Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segreg

Local-first MCP security scanner for AI-generated apps. Scan → fix → rescan from Claude Code, Cursor, Codex, and other agents.

Get your repo ready for AI.

A practical Codex skill for evidence-backed repository health audits

Local, read-only audit for stale AGENTS.md, CLAUDE.md, and generic SKILL.md instructions.

The Rails audit skill for AI coding agents, ranked by blast radius. 🚂☢️

The 10-second codebase tour. Understand any repo in one command.

Static analysis and health checks for dbt projects.

Ship agentic. Stay coherent. Self-checking code integrity for AI coding agents, via MCP.

Architecture-aware code search, dependency graphs, and impact analysis for Python, TypeScript, Rust, C#, Java, Go, Ruby, Rails, Free Pascal,

Research-first architecture engine for Python, TS, Go and Rust. Mines GitHub Issues for real production failures before scaffolding, then au

Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

Local-first static analysis that turns source code into deterministic, source-grounded workflow maps for coding agents via MCP.

Open-source design-system drift scanner — audit tokens, components, a11y & docs; score adoption; hand fixes to your coding agent. Local-firs

The modern, intelligent codebase aware linter for environment correctness

Your AI works the night shift — read-only reviews of your projects while you're busy, one digest every morning.

Cheaper and better Greptile alternative runs on your own github actions.

README-first, evidence-backed analysis for understanding public GitHub repositories before adoption.