SAST FAQs

Question 1

How does it leverage Claude Code AI?

Accepted Answer

Through the Model Context Protocol (MCP), it integrates seamlessly with Claude Code AI, allowing developers to initiate comprehensive security scans, analyze vulnerabilities, and receive insights using natural language commands directly within their AI assistant.

Question 2

Can I use this tool across different operating systems?

Accepted Answer

Yes, it supports remote execution of security tools on a dedicated Linux VM (e.g., Kali Linux) from a Windows client. It includes automatic Windows ↔ Linux path mapping for seamless cross-platform operation.

Question 3

What is the SAST tool?

Accepted Answer

This tool is an MCP server that integrates over 15 Static Application Security Testing (SAST) tools with Claude Code AI, enabling automated security analysis and vulnerability scanning through natural language commands directly from your AI assistant.

Question 4

What kind of security issues does it help detect?

Accepted Answer

It provides comprehensive security coverage for various aspects, including code vulnerabilities, leaked secrets, insecure dependencies, and security misconfigurations in Infrastructure as Code (IaC) files.

Question 5

Which SAST tools are integrated?

Accepted Answer

It integrates with leading tools like Semgrep, Bandit, TruffleHog, Gitleaks, Checkov, Safety, and Trivy, covering comprehensive code analysis, secret detection, dependency scanning, and Infrastructure as Code (IaC) security.

SAST

SAST

主な機能

ユースケース

主な機能

ユースケース