deepsec

Why we included this project

Deepsec is for teams whose codebase predates their current security tooling, the kind of legacy code that never gets reviewed because scanners only look at new pull requests. It runs an agent-based review across the whole repository, splitting work across worker machines so large codebases can be checked on demand. A fast pattern scan flags candidate sites for free, then the model budget goes into investigating those spots, and a revalidation step checks git history to cut false positives. Runs live in your own infrastructure and pick up where they left off if interrupted, and you can cap both cost and duration before starting. For a big monorepo that has accumulated years of unreviewed changes, it works better as an occasional deep audit than as another gate on new commits.