Show HN: PuedoBot, an OSS security auditor that tries to disprove its findings
Category: security
Tags: sast, security-auditing, llm, false-positive-reduction, python
Score: 6.0/10 (Innovation: 6, Technical: 6, Documentation: 7, Utility: 5)
PuedoBot is a Python-based static analysis security auditor that combines deterministic SAST engines (AST, Bandit, Semgrep, OSV, git secret scanning) with a dual-pass LLM verification pipeline to reduce false positives. Its distinguishing approach is a 'skeptical verifier' second LLM pass that actively tries to refute findings, and it supports both cloud and local model backends for offline use.
Target audience: security engineers, backend developers, devops
Repository: https://github.com/eagle9111/Puedobot-Open-Source · Python · Apache-2.0 · 3 stars
View on Hacker News