Demo: https://youtu.be/wEC9qVaB4_Y
I created a free Chrome extension that scans code generated by ChatGPT and Claude.ai detects security issues and helps you fix them.
Please give us feedback about the extension, we want to improve it! (and tell us if you would be interested in using VS Code extension as well)
*Why?*
LLMs were trained on code written by humans (your public code from GitHub), which contained many vulnerabilities. If you feed the LLM with not secure code as training data, the LLM will generate not secure code as output.
Tools like Cursor, Copilot, and any other GPT wrapper are great (I use them as well), but they generate hilariously insecure code. (Trust me, I am a security expert)
> Ye ye, I have some big-name security scanner in my pipeline, it will detect the issues for me…
Don't even get me started on that. Here https://blog.vidocsecurity.com/blog/state-of-security-automa... is my rant about classic vulnerability scanners and how bad they are in practice.
Our vision for the VS Code extension is to create “Grammarly but for code security” (we aim for a similar UX).
+ We are training LLM to detect issues in the code.
Sign up for the VS Code extension waiting list here: https://4qiq71rttej.typeform.com/to/xDrkrcH5
No comments yet.
