claude-security

Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.

Install

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• io.github.aks129/healthclaw-guardrails 34 ★
  Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation
• Prism Scanner 28 ★
  Security scanner for AI Agent skills, plugins, and MCP servers with A-F grading.
• AI Guard 19 ★
  Guardrails for AI-written JS/TS: scans, weakened-test checks, package checks, verify before done.
• ToolTrust Scanner 19 ★
  Scans MCP servers for prompt injection, data exfiltration, and privilege escalation.
• aikido 15 ★
  Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikid