foxguard
Sub-second local security scanning for real codebases.
100+ built-in rules · 10 languages · single Rust binary · Semgrep-compatible YAML bridge
foxguard.dev · npm · crates.io
A PwnKit Labs product.
Security scanners are slow. 10 seconds, 30 seconds, sometimes a minute. So developers don't run them locally — they get pushed to CI, findings pile up in PRs, and nobody looks at them.
foxguard fixes this by being fast enough that you never notice it's there. Same scan, 0.03 seconds instead of 10. You can run it on every save, every commit, every push. Security feedback becomes instant.
npx foxguard .
src/auth/login.js 14:5 CRITICAL js/no-sql-injection (CWE-89) SQL query built with template literal interpolation src/utils/config.py 7:1 HIGH py/no-hardcoded-secret (CWE-798) Hardcoded secret in 'api_key' WARNING 2 issues in 5 files (0.03s): 1 critical, 1 high, 0 medium, 0 low
... continue reading