> Subscriptions (Claude Pro/Max, ChatGPT Plus) are useful for evaluating deepsec but generally don't have enough headroom for full repo scans.
> For real scans, use Vercel AI Gateway. One key covers both Claude and Codex, and the gateway's default quotas are sized for highly concurrent research.
Not to confuse with the really long running IT-Security conference DeepSec :)
https://deepsec.net/
I'd love to have a version of this that supported local models. Maybe even finetuned ones like RedSage.
Is this perhaps related to CapitalOne VulnHunter?
Swival Audit feature gives really good results even with small, open models: https://swival.dev/pages/audit.html