App Security

Implement OAuth 2.0 and OpenID Connect flows with PKCE and token handling

Audit applications for OWASP Top 10 flaws and CVEs using pentest methods

Collect API keys and logins through a one-time expiring link instead of chat

Call APIs with shared org credentials through a broker so the secret never reaches you

Filter LLM inputs and outputs for unsafe content with the Llama Guard moderation model

Detect prompt injection and jailbreak attempts in prompts and third-party data for RAG

Audit code changes and pull requests for OWASP risks, auth flaws and exposed secrets

Prevent OWASP Top 10 flaws with safe password hashing, parameterized SQL and CORS

Audit code and infrastructure for vulnerabilities and rank findings by severity

Find outdated and vulnerable dependencies and rank them by severity and update type

Assess a patch's security impact, regression risk and auto-merge eligibility

Trace a security finding from source to sink and calibrate its severity

Read existing security findings, reports and scan status from a cloud account

Run repeated independent security scans and merge their validated findings

Write or update SECURITY.md guidance on scope, properties and out-of-scope items

Discover candidate security findings in a repository or code change

Fix a confirmed security vulnerability and check that the fix holds

Propose structural security hardening backed by evidence from findings and code

Import Snyk, Semgrep, GitHub and Wiz findings locally or into Codex Security Cloud

Review a pull request, commit or diff for security vulnerabilities

Run a single-pass security audit of a repository or a scoped path

Create, update and save a threat model for a repository or component

File validated security findings as Linear, Jira or GitHub issues without duplicates

Triage scanner and advisory findings against a repo's security policy and code

Decide whether candidate security findings are real using static code evidence

Verify that a security fix actually closes a reported vulnerability

Turn vulnerability notes and PoCs into clear, validated disclosure reports

Audit code for hardcoded secrets, injection and authz gaps and report findings

Retroactively verify threat mitigations for a completed project phase

Audit Android manifest components and Intent handling for redirection risks

Audit Android permissions, exported components and IPC security gaps

Gate document pipelines with a mandatory security check that returns pass or reject

Scan incoming files and URLs for security issues and return a pass or reject verdict

Check HashiCorp Vault health and write, read or delete secrets from the terminal

Hunt source leaks, secrets and dangerous functions with grep, semgrep and CodeQL

Find attacker-controlled input that reaches AI coding agents in GitHub Actions

Scan Algorand TEAL and PyTeal contracts for rekeying and fee validation bugs

Overlay SARIF and weAudit findings onto Trailmark code graphs for audit review

Map what each function assumes and guarantees before hunting bugs in unfamiliar code

Prepare a codebase for security review with static analysis, coverage and docs

Review C and C++ code for memory corruption, overflows and race conditions

Scan Cairo and StarkNet contracts for overflow, messaging and replay bugs

Score a smart contract codebase across nine maturity categories with evidence

Scan a codebase with CodeQL taint and data-flow analysis for vulnerabilities

Detect timing side channels from secret-dependent branches and division in crypto code

Measure timing side channels in crypto code with dudect and Timecop statistics

Scan Cosmos SDK modules and CosmWasm contracts for consensus and fund-loss bugs

Review code diffs for security impact with blast-radius counts and test coverage

Audit code for unit and decimal-scaling bugs and annotate units in comments