Trending

DeepAudit

lintsinghuaAGPL-3.0

Agent4.8K Stars570 Forks97 views

DeepAudit is an open-source multi-agent code security audit platform that automates vulnerability discovery and validation. Built on a four-agent architecture (Orchestrator, Recon, Analysis, Verification), it performs autonomous code auditing with RAG-enhanced analysis and sandbox-based PoC verification. The platform has successfully identified 49 CVEs across 16 open-source projects, with CVSS scores ranging from 3.7 to 9.8. It supports cloud and local deployment via Ollama with models like Llama3 and DeepSeek, and generates professional audit reports in PDF, Markdown, and JSON formats.

Key Features

Four-agent architecture: Orchestrator, Recon, Analysis, and Verification agents collaborate autonomously for end-to-end code auditing
RAG-enhanced vulnerability analysis with knowledge base integration for improved detection accuracy
Automated sandbox PoC verification that generates and executes proof-of-concept exploits in isolated Docker environments
49 confirmed CVE discoveries across 16 open-source projects with CVSS scores from 3.7 to 9.8
Supports Ollama local deployment with Llama3 and DeepSeek models for fully private on-premises security auditing
One-click Docker Compose deployment with automated report generation in PDF, Markdown, and JSON formats

Open Source

DeepAudit

Key Features

Tags

Related Projects

OpenClaw

Claw Code

Superpowers

OpenCode