OpenAuditKit

Next-Gen Security Audit Tool for Modern Codebases. Powered by AI. Secure by Design. Offline First.

🌐 Website • 📚 Documentation • 🐛 Report Bug

� What is OpenAuditKit?

OpenAuditKit is not just another linter. It's an intelligent security companion that lives in your terminal. Unlike traditional tools that drown you in false positives, OpenAuditKit combines robust pattern matching (Regex & Entropy) with Context-Aware AI Agents to understand why a piece of code might be dangerous.

Whether you are a solo developer or part of a large enterprise, OpenAuditKit helps you ship secure code faster.

✨ Key Features

🚀 Installation

Install simply via pip:

pip install openaudit

⚡ Quick Start

1. Basic Scan

Run a security scan on your current directory:

openaudit scan .

2. Enable AI Superpowers 🧠

Unlock the full potential with AI agents that analyze architecture and data flow:

# Set your OpenAI API Key
openaudit config set-key sk-your-api-key

# Run an AI-enhanced scan
openaudit scan . --ai

3. Ask Your Code

Don't understand a complex file? Let the Explain Agent break it down:

openaudit explain src/complex_logic.py

📊 Comparison

*TruffleHog often requires API connectivity for verification.

🤖 CI/CD Integration

Secure your pipeline with zero effort. Add this to your .github/workflows/security.yml:

name: Security Audit
on: [push, pull_request]

jobs:
  openaudit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - uses: actions/setup-python@v4
        with:
          python-version: '3.10'
      - run: pip install openaudit
      - run: openaudit scan . --ci --fail-on high --ai
        env:
          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }} # Optional for AI features

🛡️ Security Philosophy

At NeuralForge, we believe security tools should be:

1. Silent but Deadly: Only alert on real issues (Low False Positives).
2. Educational: Don't just find bugs, explain them.
3. Private: Your code never leaves your machine unless you explicitly opt-in to AI features (which are redacted by default).

🤝 Contributing

We love contributions! Please check out our Contributing Guide to get started.