An extremely fast security scanner, written in Rust.

Scans in milliseconds

Written in Rust, with no database to build.

foxguard 0.8.1 built-ins vs Semgrep 1.156 & OpenGrep 1.22 (--config auto, identical findings) · median of 3 runs, Apple Silicon · bars animate at true measured wall-clock time · full comparison vs CodeQL, Snyk & SonarQube →

Cross-file taint analysis

foxguard tracks untrusted input across files in Python, JavaScript, and Go, linking a source in one file to a sink in another in 0.03 seconds.

from . import queries

def search(request):
    name = request.GET["name"]
    return queries.run_query(name)

def run_query(name):
    cur = db.cursor()
    cur.execute(
        "SELECT * FROM users"
        " WHERE name = '" + name + "'"
    )

Built for your terminal

Readable scan output, plus an interactive TUI. Run foxguard tui . to browse findings, read dataflow traces, and dismiss false positives.

terminal

foxguard v0.7.0

src/auth/login.js · 2 issues

█ CRITICAL Untrusted input reaches `db.query`

js/taint-sql-injection (CWE-89) line 14:5

db.query("SELECT * FROM users WHERE id = '" + req.params.id + "'")

█ Fix: Use parameterized queries

█ HIGH Hardcoded JWT secret

js/jwt-hardcoded-secret (CWE-798) line 8:1

const JWT_SECRET = "super-secret-prod-key"

app/views.py · 1 issue

█ CRITICAL `request.GET` reaches `cursor.execute`

py/taint-sql-injection (CWE-89) line 52:12

cursor.execute("SELECT * FROM users WHERE id = '%s'" % user_id)

█ Fix: Use parameterized queries

3 issues 1,204 files · 0.14s

2 critical 1 high

foxguard tui .

Framework-aware by default

Built-in rules understand Express, Django, Flask, and Spring, so a safe idiom won't raise a false alert.

Post-quantum crypto audit, built in

One command flags RSA, ECDSA, ECDH, DH, and DSA across five languages, web-server configs, and six lockfile formats.

Rules

201 built-in rules, each mapped to a CWE.