Back to directory

DeepSec

DeepSec is an AI security platform combining Shield, a code auditor that flags hallucinated packages, missing safeguards and other AI-introduced pattern errors, with Spear, an authorized penetration-testing engine with more than 40 skill packs.

Visit website (opens in a new tab)unclecheng-li.github.io
DeepSec

DeepSec, evolved from an earlier project called VibeGuard, unifies two AI security tools, Shield and Spear, into one CLI, a terminal workbench and a set of IDE plugins. Shield audits code for security issues introduced or missed by AI generation, using a three-layer pipeline that starts with fast regex and offline checks for hallucinated packages, hardcoded secrets and insecure configuration, and escalates to LLM-based semantic analysis when requested; it can also audit agent configurations and run a supply-chain security check, and can output results in SARIF format or stream them for the terminal UI to consume.

Spear automates authorized penetration testing across more than 40 skill packs, from reconnaissance through proof-of-concept, gated by an explicit target allow-list managed from the terminal UI so a scan can only run against authorized targets. It installs as a Python package with pip, an optional Rust terminal UI built with Cargo, and VSCode and JetBrains IDE plugins; prebuilt binaries are also available for users who prefer not to compile it themselves.

More in Security

See all 287
  • The Standup

    standup.thecompound.tech

    A daily email and dashboard tracking software releases, security advisories, outages and breaking changes across the vendors and repositories a team depends on, surfacing only what needs action rather than a full news feed.

  • Drop

    droprun.sh

    A rootless Linux sandbox for developers, built on user namespaces with optional gVisor isolation, that confines coding agents and third-party packages without leaving your normal work environment.

  • Compliance Posture

    complianceposture.com

    A free, searchable directory that tracks the security and compliance certifications, such as SOC 2, ISO 27001, HIPAA, and GDPR, of over 400 SaaS vendors across twenty categories, with side-by-side comparisons.