I built a security scanner where an AI reviews every finding

说明与用途

OpenRouting 结合开源扫描器和 Claude AI，审核每个发现，提供 verdict、解释和修复，降低误报，提高团队效率。

问题

Security scanners produce many findings, many false positives, leading to report abandonment.

结果

OpenRouting reduces false positives, provides clear fixes, and tracks findings across scans, enabling teams to act on real issues efficiently.

工作流

• Sign in with Google or GitHub
• Connect a GitHub repository
• Start a scan
• OpenRouting runs SAST, secrets, IaC, PR, AI-agent, API collection, passive website checks
• Claude reviews each finding
• Dashboard displays verdict, confidence, explanation, fix, reviewer
• Mark findings as false_positive, accepted_risk, or fixed
• Generate downloadable Markdown/PDF report
• Optional: use AI assistant to search findings

证据

Every security scanner I've used has the same problem: the first run produces a wall of findings, half of them aren't real, and after a week nobody opens the report anymore.

来源

It runs proven open-source scanners on your repository, then has Claude, via Amazon Bedrock, review every finding before you see it: is this real or a likely false positive, how sure is it, what could go wrong, and what's the fix.

来源

Each finding in the dashboard comes with: A verdict: real issue or likely false positive, with a confidence score.

来源

Repositories are cloned, read and never executed: no installs, builds or scripts.

来源

No subscription. You pay with credits, per workspace.

来源