Open Source — MIT Licensed

The first security scanner built for AI-generated code.

Guardiant detects vulnerabilities unique to Cursor, Copilot, Claude Code, and v0.dev. The ones traditional scanners were never designed to find.

8
AI Agents
3
Research Frameworks
5
Phase Engine
guardiant scan
$guardiant scan https://myapp.com
[00:00:01] Initializing 8 security agents...
RECON: 47 endpoints mapped
SWARM: 8 agents active
VCVF: 2 AI code flaws detected
CVC: 1 vulnerability chain found
CRITICAL: Exploit chain detected
TIEF Score: 9.2/10 | Priority: P0 | CVSS: 9.8
$
WHY GUARDIANT

Traditional scanners find CVEs. We find structural flaws.

AI coding assistants introduce predictable vulnerability patterns. Guardiant was built to detect them.

Vulnerability PatternLegacy ScannersGuardiant
Symmetric CRUD (IDOR)NoYes
Missing Row Level SecurityNoYes
Client-side authority checksNoYes
Auth/authz conflation chainsNoYes
Over-permissive defaultsNoYes
BaaS direct database bypassNoYes
Trust boundary inversionsNoYes
HOW IT WORKS

5-phase engine. 8 specialized agents.

Recon maps the attack surface. The agent swarm analyzes in parallel. Three research frameworks find what others miss.

PHASE 01

Recon

Discover endpoints, tech stack, auth mechanisms, exposed configs.

PHASE 02

Agent Swarm

8 specialized agents analyze different vulnerability classes in parallel.

PHASE 03

CVC Analysis

Chain related findings into compound vulnerability attack paths.

PHASE 04

TIEF Detection

Find trust inversions where code trusts the wrong boundary.

The 8 Agents

reconEndpoints, tech stack, source maps, exposed configs
authAuthentication bypass, session fixation, JWT issues
injectionSQL injection, XSS, command injection, SSTI
baasSupabase/Firebase misconfigs, missing RLS
secretsHardcoded credentials, exposed API keys
supply_chainDependency vulnerabilities, malicious packages
business_logicIDOR, price manipulation, auth/authz conflation
race_conditionTOCTOU bugs, concurrent request abuse
AGENT PROMPT LIBRARY

Copy a prompt. Paste into your coding agent.

Works with Cursor, GitHub Copilot, Claude Code, Windsurf, and any coding agent that accepts natural language instructions.

scan-this-project

Clone https://github.com/paarthbhatt/Guardiant into a temporary directory, install dependencies with pnpm, build the project, then run a full security scan against the current working directory using: pnpm cli scan <current-directory> --type directory. Show me the complete scan results.

scan-a-url

Clone https://github.com/paarthbhatt/Guardiant, install with pnpm, build it, then scan https://example.com by running: pnpm cli scan https://example.com. Report all findings grouped by severity.

targeted-scan

Clone https://github.com/paarthbhatt/Guardiant, install with pnpm, build it, then run: pnpm cli scan <current-directory> --type directory --agents auth,injection,baas,race_condition. Show remediation steps for each finding.

QUICK START

Running in 3 commands.

terminal
$git clone https://github.com/paarthbhatt/Guardiant.git
$cd Guardiant && pnpm install && pnpm build
$export ANTHROPIC_API_KEY="sk-ant-..."
$guardiant scan https://example.com

Open source. MIT licensed.

Guardiant is free to use, modify, and distribute. Star the repo if you find it useful.