Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open switches, weak crypto, permissive access, debug leakage. Parallel sweeps collect candidates, then a refuting verifier traces each one to the security decision it reaches before

Detects timing side-channels in cryptographic code

Performs security-focused differential review of code changes

Identifies state-changing entry points in smart contracts

Safely analyzes and cleans up local git branches and worktrees, categorizing them as merged, squash-merged, superseded, or active work before deleting anything.

Scans Android APKs for Firebase security misconfigurations

Creates Semgrep rules with test-first methodology

Audit a project for software supply chain risk, including dependency vulnerabilities, lockfile issues, malicious package indicators, SBOM coverage, and license concerns.

What am I dealing with? Inventory, complexity, debt, security and a recommended modernization pattern

Validate application configuration with schemas, per-environment rules, runtime checks, and secure handling of sensitive values

Step-by-step guide for configuring OAuth authentication (GitHub/GitLab/Google) for Nuxt Studio

Display Better Auth available authentication providers and their configuration