AI-powered security scanner for VS Code — real-time vulnerability detection with CWE classification, auto-fix suggestions, and workspace-wide scanning.
Features
🔍 Real-Time Scanning
Automatically scans files on save and flags vulnerabilities with squiggles
Red squiggles for Critical/High, yellow for Medium/Low
Status bar shows live finding count: ⚠ 3 findings (red) or ✓ Clean (green)
🎯 What It Detects
Category
Examples
Secrets
Hardcoded passwords, API keys, tokens
Injection
SQL injection, command injection, eval() abuse
Crypto
Weak randomness (Math.random), weak algorithms
XSS
innerHTML with user input
Path Traversal
fs.readFile with request data
Auth
JWT decoded (not verified)
📋 Scan Options
Trigger
Scope
Auto (on save)
Current file
⌘⇧P → Scan Current File
Active editor tab
⌘⇧P → Scan Open Files
All open tabs
Right-click folder → TitanShield: Scan Folder
Selected folder
⌘⇧P → Scan Workspace
Entire project
📊 Output Channel
Open View → Output → TitanShield to see a detailed log with clickable file links that jump to the exact flagged line:
