CybeDefend

Scan. Detect. Fix. — Security meets AI, right in your editor.

Website • Features • Installation • Getting Started • Security Scanning • CybeAgent • Configuration • Acknowledgments

Overview

CybeDefend brings security scanning and an AI-powered fix agent directly into your code editor. In a single workflow you can:

1. Scan your project for vulnerabilities (SAST, SCA, IAC, secrets, CI/CD)
2. Review findings with severity ratings, CWE references, and data flow details
3. Fix issues instantly — either with one-click AI remediation or automated dependency upgrades

Features

Security Scanning

Run a full security audit of your codebase without leaving your editor. CybeDefend supports five scan types:

Results appear in a dedicated sidebar, grouped by severity — Critical, High, Medium, Low, Info — with colored gutter icons and diagnostic underlines directly in your code.

CybeAgent — AI-Powered Fix

When a vulnerability is detected, click "Fix with CybeAgent" to let the AI agent fix it for you. The agent receives the full context of the issue — severity, CWE, OWASP classification, vulnerable code snippet, data flow, and remediation guidance — then proposes a precise code edit that you can review and apply.

CybeAgent identifies a SQL injection vulnerability, analyzes the code, and generates a fix using parameterized queries — all inside the editor.

DeepFix — Automated Dependency Upgrades

For SCA vulnerabilities (insecure dependencies), CybeDefend includes DeepFix: an automated engine that resolves safe version upgrades across 10 package ecosystems. No AI needed — just a one-click upgrade command.

npm · maven · pip/pypi · go · nuget · packagist · rubygems · crates · swiftpm

Editor Integration

CybeDefend integrates deeply into your editor:

• Gutter icons — Severity-colored markers on every vulnerable line
• Diagnostics — Native squiggly underlines, visible in the Problems panel
• Context menu — Right-click a vulnerability marker to view details or trigger a fix
• Status bar — Live scan progress and result summary

Localization

Available in English and French.

Install from the Marketplace

1. Open the Extensions panel (Ctrl+Shift+X / Cmd+Shift+X)
2. Search for CybeDefend
3. Click Install

Getting Started

1. Sign In

Click the CybeDefend icon in the Activity Bar, sign in with your CybeDefend account, and select your project. Authentication uses a secure PKCE-based OAuth2 flow.

2. Run a Security Scan

1. Open the CybeDefend Security panel (shield icon in the Activity Bar)
2. Click Play to start a scan
3. Browse results grouped by file, severity, or vulnerability type
4. Click any finding to see full details, data flow, and remediation advice
5. Click "Fix with CybeAgent" to generate an AI fix, or use DeepFix for automated dependency upgrades

Your workspace is linked to a CybeDefend project and branch in the extension settings.

Security Scanning

Vulnerability Lifecycle

Manage the status of each finding directly from VS Code:

Ignoring Files

Create a .cybedefend file at the root of your project to exclude files or directories from scanning. Uses the same syntax as .gitignore.

CybeAgent

CybeAgent is the built-in AI assistant. It can read, edit, and create files, run terminal commands, search your codebase, and interact with web pages — all through natural language.

Available Tools

Keyboard Shortcuts

Configuration

Access settings via Cmd+, (macOS) or Ctrl+, (Windows/Linux) → search "cybedefend".

Regions

Acknowledgments

CybeDefend is built on top of Kilo Code, an open-source AI coding agent. We extend it with security scanning, authentication, and the CybeDefend AI provider.

cybedefend.com