lambdasec / frame
The sound, open SAST for modern apps: code, dependencies, secrets, infrastructure and AI, in one tool
Why this job: topics: security-tools, security, ai-security, cybersecurity
What it does
Frame finds vulnerabilities by following attacker data through your code, across functions, files and layers, and proves each finding with a solver instead of pattern-matching. One open tool covers what a modern app needs scanned: the code, its dependencies, its secrets, its infrastructure and its AI calls. It runs offline, and the same soundness that keeps false alarms down lets it prove a fix actually removed the bug.
Get started
pip install "frame-security[scan]"
frame scan src/- Maintenance
- Active
- Last commit today
- Stars
- 106
- +54 this week
- Licence
- Apache-2.0
- Allows business use
- Downloads for
- None listed
- No release files
- Latest version
- v1.1.3
- Released 5 days ago
- Built with
- Python
- 96% of the code
Is it looked after?
- Contributors
- 2
- Last 90 days
- Issues
- 100% closed
- 0 still open
- Pull requests
- 8 merged
- 0 waiting
- Releases
- 5
- Not stated for last year
- Contributing guide (opens in new tab)
- Security policy (opens in new tab)
- No code of conduct
Similar repos
| Repo | Stars | Last commit | Licence | Downloads for |
|---|---|---|---|---|
| Pantheon-Security / medusa | 1,016 | 4 months ago | AGPL-3.0 | No downloads |
| Agent-Field / sec-af | 200 | 9 days ago | Apache-2.0 | No downloads |
| agentgg-dev / agentgg | 460 | 8 days ago | Apache-2.0 | No downloads |
More: languages, topics and project record
Languages
- Python 96%
- Java 2%
- JavaScript 1%
- C# 1%
Topics
- ai-security
- application-security
- appsec
- code-scanning
- cybersecurity
- devsecops
- llm
- program-analysis
- sarif
- sast
- secure-coding
- security
Project record
- JobAI security
- StatusListed
- Commits646
- Forks15
- Watching1
- Stars in 28 days+58
- CreatedNov 16, 2025
- First seen by usNov 11, 2026