Penthera

Find security gaps before you push to production. Point Penthera (local btw) at your site or code and see what's wrong, with evidence. It checks secrets, headers, dependencies and your AI setup (MCP, skills, plugins). It fixes what it can with your consent on a local branch, then re-scans to prove it. Free and open source. Research-backed rules decide every finding, your code stays on your machine, no account, no telemetry. Benchmarked in public, no bs, just more safety for all.