AI Security Studio is an offline security research platform for authorized security professionals. Your code, your targets, and your findings never leave your machine. Most analysis tools send your source code to a cloud service. This one doesn't. Parsing, rule evaluation, AI reasoning, and reporting all run locally — there is no cloud AI, no code upload, and no telemetry. Deterministic analysis finds. AI explains. AI Security Studio doesn't ask a language model to guess at vulnerabilities. Parsers build a real model of your application — AST, call graph, dependency graph, routes, controllers, authentication and authorization surfaces. A deterministic rule engine then evaluates that model for exposed secrets, JWT weaknesses, injection patterns, insecure headers and cookies, CORS and CSP misconfiguration, and vulnerable dependencies. Only then does a local language model come in — to summarize application structure, explain why a finding matters, correlate related issues, and help you prioritize what to review by hand. Every finding carries evidence, reasoning, a confidence score, risk level, suggested fix, and a security reference. When evidence is insufficient, it says so rather than inventing a conclusion. Code and web surface in one model. Static analysis and web assessment feed a single per-engagement knowledge graph. Crawl results, discovered APIs, JavaScript bundles, authentication flows, technologies and findings are cross-linked, so an endpoint found in a JavaScript bundle connects to the controller that implements it. Built for real engagements. Findings, evidence, notes, bookmarks, risk scores and scan history persist per engagement. Reports export to HTML, Markdown, PDF and SARIF. A command-line companion brings the same analysis to scripts and CI pipelines. Requirements AI features require a separate local model runtime — Ollama, llama.cpp, or LM Studio — plus a downloaded model such as Qwen2.5-Coder, DeepSeek-Coder, Llama or Gemma. These are free, separate downloads; model files typically need 4–20 GB of disk space. Static analysis and the rule engine work without them. Authorized use only AI Security Studio is intended for assessing systems you own or have explicit written permission to test.
Developer Tools · Windows · Free
