Find vulnerabilities.
Propose fixes intelligently.
SecNsight scans Python, JavaScript/TypeScript, Go, Java and C# projects for vulnerable dependencies, leaked secrets and risky code, then explains each problem and proposes a remediation.
Free for up to 2 repositories. Public and private repositories, read-only access.
Try it without an account: paste a dependency file
- Packages
- Known vulnerabilities from OSV.dev, unpinned versions, risky install scripts, and names that don't exist on PyPI, npm, Go, Maven Central or NuGet.
- Secrets
- Cloud keys, tokens, private keys and hardcoded passwords in any language. Matches are masked in every report.
- Code patterns
- Bandit plus rules for five languages, aimed at habits common in AI output, like running model output as code or building SQL from strings.
Coverage
| Language | Dependency files | Registry |
|---|---|---|
| Python | requirements*.txt | PyPI |
| JavaScript, TypeScript | package.json, package-lock.json | npm |
| Go | go.mod | Go module proxy |
| Java, Kotlin | pom.xml, build.gradle | Maven Central |
| C#, .NET | *.csproj, Directory.Packages.props | NuGet |