Documentation
Security
Security Overview
QODRYX provides comprehensive security scanning powered by AI to detect and fix vulnerabilities in your codebase.
How It Works
When you connect a repository, QODRYX automatically scans your code for security issues. Our AI analyzes:
- Source code patterns for common vulnerabilities (SAST)
- Hardcoded secrets and credentials
- Dependency manifests for known CVEs
- Configuration files for misconfigurations
Security Features
SAST Scanning
Static Application Security Testing detects vulnerabilities like SQL injection, XSS, and more.
Secret Detection
Find exposed API keys, passwords, tokens, and other sensitive data in your code.
Dependency Scanning
Check your dependencies for known CVEs and security vulnerabilities.
Auto-Remediation
Let AI automatically fix vulnerabilities and create pull requests.
Severity Levels
Critical — Immediate action required. Exploitable vulnerabilities.
High — Should be fixed soon. Significant security risk.
Medium — Moderate risk. Plan to fix in next sprint.
Low — Minor issues. Fix when convenient.
Info — Informational findings. No immediate action needed.
Supported Languages
JavaScriptTypeScriptPythonJavaGoRubyPHPC#RustSwiftKotlin