DryRun Security

DryRun Security is an AI-driven tool created to help developers with automated security checks integrated directly into their coding. It serves as a 'security buddy' in the coding process, re-examining each code modification as a pull request, so developers can work more quickly and securely.

The main goal is to offer a 'security context' to developers, helping them understand the effect of their code modifications as they open a pull request.

DryRun Security uses a process called 'Contextual Security Analysis' to assess each pull request. This helps reduce frustration caused by constant alerts or inaccurate findings common in many security testing applications.

This tool is designed to support a range of languages and frameworks like Rails, Express, Golang, Python, Node.js, Next.js, and Javascript, with plans for more.

It checks security features, including Authentication and Authorization, Sensitive Codepaths, Sensitive Functions, Authorship and Intent, and Code Brittleness.

The tool offers simple installation as a GitHub App and provides rapid security reviews for code changes to enable quicker merging. Furthermore, it adds a protection layer to each source code repository in your organization, boosts the speed of the development pipeline, and therefore improves developer output.