GitHub Repository

Find and fix web-app vulnerabilities in one command — SAST + DAST + AI, for devs who aren't security experts.

5 starsPython

isitsecure - 1-command SAST & DAST & LLM security scanner for web apps

Name: isitsecure - 1-command SAST & DAST & LLM security scanner for web apps
Availability: InStock
Author: kunaljaura

by kunaljaura·Jul 11, 2026·2 points·0 comments

Visit Project View on HN

AI Analysis

●●SolidShip ItSolve My Problem

40 scanners in one command when GitHub Advanced Security already exists.

Strengths

•Combines SAST, DAST, and LLM analysis in single CLI workflow
•Graded HTML reports with auto-fix suggestions included
•Supports TypeScript, Python, Java without configuration

Weaknesses

•Security scanning is crowded with well-funded competitors like Snyk and Semgrep
•LLM code review requires API key, adding cost and complexity

Similar Projects

Security●●●Banger

Mcpaudit – static security scanner for MCP servers

First static analyzer for MCP servers catching command injection before you plug it in.

Zero to OneSolve My Problem

allenwu06

301mo ago

Security●●Solid

Infoseclist.com – Compare 90 cybersecurity tools ranked by practition

Two neat ideas here: dual scores (Market vs Value) and side‑by‑side comparisons with filters for compliance and team size — those make vendor shortlists usable instead of noisy. The tech is pragmatic: a Google Sheet served via a PHP CSV proxy and parsed client‑side keeps the CMS trivial, but that approach could become a scaling or trust bottleneck as the dataset and verification needs grow. Visually the site looks sharp, but the long game depends on how rigorously listings are vetted and updated.

Niche GemSlickSolve My Problem

aleks5678

114mo ago

Security●●●Banger