What it does
DeepAudit uses several AI agents working together to audit software code for security vulnerabilities, weaknesses an attacker could exploit. It can also try to confirm findings safely inside a sandbox, an isolated test environment.
You can import projects from GitHub, GitLab or Gitea, or paste code for a quick check. It shows the agents' progress live, has a dashboard, and exports reports as PDF, Markdown or JSON.
According to its description it can run with private local models through Ollama. The README lists vulnerabilities its makers say a closed-source version found in other open-source projects. The README is in Chinese and gives few setup details.
Who it's for
Developers and security teams who want AI help auditing their own code.
Can I use it without coding?
Developers only. The README does not explain installation; it is aimed at technical users. New to this? Start here.
Can I run it?
- Privacy
- Your choice: run it on your device or use an online service
- API key
- Not needed
Try it
Using Claude Code, Cursor or another AI coding assistant? Paste the prompt and it will walk you through the setup.New to this?
Before you install
- Only download from the official GitHub page. Copies with similar names exist for many popular projects.
- License (AGPL-3.0): Free to use; if you run a changed version as an online service, you must share your source code.
- More on staying safe