Tudor B.

AI Security Toolkit V4

30+ security tools,
one AI brain

Claude is the orchestrator. Semgrep, ZAP, Trivy, Nuclei, and 26 more tools are the sensors. 9 specialist agents coordinate them in a 7-phase pipeline, then cross-pollinate findings to build attack chains no single tool would catch.

Request Security Assessment

9 AI Agents

30+ Security Tools

7 Phase Pipeline

95%+ OWASP Coverage

ai-security-scan-v4

$ /ai-security-scan-v4 --repo github.com/client/webapp

[V4] Initializing 9 specialist agents...

[SURFACE] 23 endpoints, 4 auth flows, 2 file uploads

[SAST] Semgrep + Bearer: 3 findings in 847 files

[SCA] CVE-2024-3241 (jsonwebtoken 8.5.1) HIGH

[DAST] ZAP + Nuclei probing 23 endpoints...

[AGENT:auth-bypass] Session fixation in /api/oauth/call

[CHAIN] SCA CVE + DAST endpoint = token forge → admin

[AUDIT] OWASP Top 10: 95.2% covered, gap: SSRF

[REPORT] 7 phases complete → 14 findings, 2 attack chains

Section 01

9 Specialist Agents

Each agent focuses on a specific attack class. They run in parallel, share findings, and build multi-step attack chains that individual tools would never detect.

CLAUDE

Protocol Analyst

Auth Bypass

Client DOM

Injection

SAST

SCA

Secrets

DAST

Coverage

Protocol Analyst

Maps API endpoints, auth flows, file upload handlers, and WebSocket connections.

Auth Bypass

Tests session management, OAuth, JWT validation, privilege escalation, IDOR.

Client-Side DOM

Scans for XSS, prototype pollution, client-side injection, postMessage handlers.

Injection Chains

Tests SQLi, command injection, SSTI, SSRF, path traversal with context-aware payloads.

SAST Agent

Static analysis via Semgrep, Bandit, njsscan, Bearer, gosec with custom rules.

SCA Agent

Dependency scanning with Trivy, Syft, pip-audit. Maps CVEs to usage paths.

Secrets Agent

Runs gitleaks, trufflehog across git history. Validates if keys are still active.

DAST Orchestrator

Coordinates ZAP, Nuclei, sqlmap, Wapiti, ffuf, XSStrike, Dalfox against live endpoints.

Coverage Coverageor

Maps findings to OWASP Top 10. Triggers gap-fill scans for zero-coverage categories.

Section 02

What Makes This Different

Capability	Description	Example
SPEC-01 Cross-Pollination	When one agent finds something, it tells related agents to focus there. SCA finds vulnerable JWT library → DAST agent targets auth endpoints using that library.	SCA CVE → DAST focus
SPEC-02 Attack Chains	Individual findings are medium severity. Combined, they're critical. The toolkit links SCA + DAST + Auth findings into full exploitation paths.	JWT vuln + /api/refresh → admin
SPEC-03 Coverage Coverage	Every scan maps findings to OWASP Top 10 categories. If any category has zero coverage, gap-fill scans run before the final report.	Gap: SSRF → run nuclei ssrf
SPEC-04 Human Review	AI finds and correlates. Humans verify and prioritize. Every critical finding is manually validated before it appears in your report.	AI: 14 findings → Human: 9 valid

Section 03

7-Phase Pipeline

Surface

Map attack surface: endpoints, auth, uploads

Parallel

9 agents run concurrently

Cross-Pollinate

Share findings between agents

Chain

Build multi-step attack paths

Coverage

Check OWASP Top 10 coverage

Gap-Fill

Target zero-coverage areas

Report

Human-reviewed findings

Section 04