PuedoBot Core

PuedoBot Core is an open-source security auditing tool designed for developers. It performs static application security testing (SAST) and supply-chain auditing by combining deterministic static analysis techniques with a dual-pass skeptical AI triage using large language models (LLMs) to eliminate false positives. It supports multi-engine scanning (AST traversal, Bandit, Semgrep, OSV advisories, git secret scanning) and allows integration with various cloud or local AI models. The tool features an interactive CLI with detailed code evidence and prioritizes privacy with air-gapped operation capability.