The Engineering Inside Vouch
<15ms
AST Security Gate
Pre-LLM syntax pass.
4-Agent
Security Pipeline
Recon, Taint, PoC & Patch.
Instant
PR Security Bot
Zero-install GitHub gate.
HMAC-256
Anti-Tamper Badges
Signed commit proofs.
How the Vouch Engine Works
01
ReconAgent
AST Surface
Extracts routes, actions, and manifests without full code LLM prompts.
02
SecurityAgent
Taint & CWE
Dual-engine AST rules and semantic reasoning for OWASP Top 10 flaws.
03
ReliabilityAgent
PoC Validation
Generates reproducible curl PoCs and 0-100 scores to remove false positives.
04
PatchAgent
Git Diff & Badge
Synthesizes ready-to-merge .patch diffs and HMAC-SHA256 badges.
Interactive Showcase Playground
Vulnerable Snippetapp/actions.ts
'use server';
// Missing auth check
export async function deleteUser(id: string) {
await db.user.delete({ where: { id } });
}
Engine: Tier-0 AST (<2ms, 0 tokens).
Synthesized Patchvouch/patch
'use server';
+ import { auth } from '@/lib/auth';
export async function deleteUser(id: string) {
+ const session = await auth();
+ if (!session?.user) throw new Error('Unauthorized');
await db.user.delete({ where: { id } });
}
Grade A+ CertifiedRun Scan