Back to directory

Awesome Large Language Models for Vulnerability Detection

A continuously updated, curated index of research papers, projects and agent skills on using large language models to detect software vulnerabilities, spanning function-level, repository-level, agentic and smart-contract detection.

Awesome Large Language Models for Vulnerability Detection

This is a curated list of papers, projects and agent skills on using LLMs for vulnerability detection and discovery. It focuses on work from 2025 onward, with a separate archive for earlier papers, and each entry links the paper, its venue and year, and, where available, an accompanying code repository.

Topics covered include benchmarking coding agents on repository-level vulnerability detection, retrieval-augmented and multi-agent detection approaches, fine-tuned models for vulnerability reasoning, and empirical studies of how well general-purpose LLMs find real vulnerabilities at project scale. It is maintained as an open, community-curated index under the MIT license.

More in Security

See all 287
  • The Standup

    standup.thecompound.tech

    A daily email and dashboard tracking software releases, security advisories, outages and breaking changes across the vendors and repositories a team depends on, surfacing only what needs action rather than a full news feed.

  • Drop

    droprun.sh

    A rootless Linux sandbox for developers, built on user namespaces with optional gVisor isolation, that confines coding agents and third-party packages without leaving your normal work environment.

  • Compliance Posture

    complianceposture.com

    A free, searchable directory that tracks the security and compliance certifications, such as SOC 2, ISO 27001, HIPAA, and GDPR, of over 400 SaaS vendors across twenty categories, with side-by-side comparisons.