DeepAudit

DeepAudit is an open-source code security auditing platform using multi-agent collaboration and sandbox Proof-of-Concept checks.

DeepAudit is a code security auditing platform driven by a multi-agent architecture. It simulates security expert workflows through autonomous agents to understand code, discover vulnerabilities, and run automated sandbox PoC verification. Users can import projects via GitHub, GitLab, and Gitea or upload files to scan for issues like SQL injection, XSS, and command injection. It supports models from OpenAI, Claude, Google, DeepSeek, and local deployment via Ollama. It exports professional reports in PDF, Markdown, and JSON formats.

DeepAudit at a glance

Best for: Software engineer
Runs on: Web, Docker, self-hosted, open source
Pricing: Free
Released: September 2025
Category: AI coding tool
Website: github.com/lintsinghua/DeepAudit

Key features

Multi-agent collaborative code auditing
Docker sandbox PoC verification
RAG knowledge enhancement with CWE and CVE search
Project management with GitHub, GitLab, and Gitea import
Instant code snippet analysis
Five-dimensional detection covering bugs and security
Report export in PDF, Markdown, and JSON

Use it for

Auditing source code for security vulnerabilities
Running automated sandbox attack script verification
Managing multiple projects with Git integration
Exporting professional security audit reports

Alternatives to DeepAudit

CodeScan Artex — It uses multiple parallel AI agents to read source code and verify vulnerabilities.
DeepSource — Automated code reviews that combine static analysis with AI agents.
Deepsec — Runs security reviews on all existing code using scaled VM fanout.
OpenClaude — Connects one terminal interface to over 200 different AI models.
OpenCode — Works with 75+ model providers, local models, and existing subscriptions
jevgrep — Reduces coding agent costs by providing targeted, relevant repository context.
Security Audit Skill — Automated multi-stage security auditing with independent verification.
Codacy — Enforces unified coding standards and security policies across the software lifecycle.
Proteus — Adds audio capability to DeepSeek Harness without code changes.
OpenSandbox — Provides isolated environments with multi-language SDKs and lifecycle management.
DeepCode — Turn natural language and research papers into production-ready code with parallel agents.
DeepTeam — It automates penetration testing using adversarial LLM simulations.

All DeepAudit alternatives