Documentation

Quick Start

Get up and running with AI Hardener in under 5 minutes. Create your account, connect your first repository, and run your first scan.

Get started →

Integrations

Learn how to integrate AI Hardener with your IDE, CI/CD pipeline, or AI coding assistant for seamless security scanning.

View integrations →

API Reference

Complete REST API documentation for programmatic access to AI Hardener's scanning capabilities.

View API docs →

Security Scanners

Detailed information about the 27 security tools integrated into AI Hardener and how they work together.

Explore scanners →

Quick Start Guide

Create your account

Connect your repository

Link your GitHub, GitLab, or Bitbucket account to import your repositories. We use OAuth so we never see your password.

Run your first scan

Select a repository and click "Scan Now". AI Hardener automatically detects your languages and runs the appropriate security tools.

Review findings

View your security score, browse findings by severity, and get plain-language explanations with fix suggestions.

Integration Methods

AI Hardener works wherever you write code. Choose the integration that fits your workflow:

Natural Language Prompt

Simply ask your AI coding assistant to "run a security scan" and AI Hardener handles the rest.

"Please scan this code for security vulnerabilities"

MCP Server (Claude/Cursor)

Add AI Hardener as an MCP server for native integration with Claude and Cursor.

{
  "mcpServers": {
    "aihardener": {
      "command": "npx",
      "args": ["@aihardener/mcp-server"]
    }
  }
}

REST API

Integrate directly with our REST API for custom workflows and automation.

curl -X POST https://api.aihardener.com/v1/scans \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"projectId": "proj_xxx", "profile": "standard"}'

GitHub Action

Add security scanning to your CI/CD pipeline with our GitHub Action.

- name: AI Hardener Security Scan
  uses: aihardener/scan-action@v1
  with:
    api-key: ${{ secrets.AIHARDENER_API_KEY }}
    profile: comprehensive

Integrated Security Tools

AI Hardener integrates 27 best-in-class open-source security tools, all with permissive licenses:

Static Analysis (SAST)

Bandit - Python security linter
Gosec - Go security checker
ESLint Security - JavaScript/TypeScript
PMD - Multi-language analyzer
Opengrep - Pattern-based analysis

Dynamic Analysis (DAST)

OWASP ZAP - Web app scanner
Nuclei - Template-based scanner

Composition Analysis (SCA)

Trivy - Container & dependency scanning
Grype - Vulnerability scanner

Secret Detection

Gitleaks - Git secret scanner
detect-secrets - Secret detection

Infrastructure as Code

Checkov - IaC security scanner

Supply Chain

Syft - SBOM generation
in-toto - Supply chain integrity
Cosign/Sigstore - Signing & attestation