owasp-security-check

Audits web application and REST API code for security vulnerabilities and reports prioritized findings with concrete remediation examples.

When to use it

Use for codebase security audits, authentication and authorization reviews, REST API assessments, deployment reviews, or after adding sensitive-data features.

Give it application code to audit; it returns security findings with severity, file locations, impact, and remediation examples.