Debuggix Security Scanner

Question

What is Debuggix?

Debuggix scans your code with 9 security engines in parallel — Semgrep, Bandit, Gitleaks, TruffleHog, Trivy, ESLint, Hadolint, Checkov, and OSV-Scanner — then uses AI to cross-reference findings against your README and SECURITY.md to filter out noise.

How It Works

1. Paste a GitHub URL
2. 9 engines run in parallel (~60 seconds)
3. AI filters out test files, build artifacts, and documented patterns
4. You see only what matters — usually 3-6 real findings instead of 200

Key Features

• 9 engines in one scan — no config, no CLI
• AI confidence scoring on every finding (0-100%)
• Verified badges for clean repos (like Shields.io but with real-time status)
• Free for public repos (10 scans/month)
• Zero data retention — source code deleted after scan

What We've Found

• 90+ repos scanned
• 50+ verified clean
• Real vulnerabilities caught and fixed by maintainers at AgentWasp, InfraCanvas, and more
• Kubernetes: 134 raw findings → 0 real after AI filter

Get Involved

Scan your repo free at debuggix.space. Open source contributors welcome.