Auth Flow Reviewer
Check a new or changed authentication/authorization flow for the specific mistakes that actually cause breaches: missing object-level checks, token misuse, and session handling gaps.
Dependency Vulnerability Auditor
Turn a raw dependency-audit tool's output into a prioritized, actionable list -- which CVEs are actually reachable from this codebase's usage, not just present in the lockfile.
SQL Injection Auditor
Trace every place user input reaches a database query in a diff, and confirm parameterization -- string-built SQL is the finding, not a maybe.
Secrets Scanner
Find credentials, API keys, and tokens accidentally committed to a diff or repo, distinguishing real secrets from test fixtures and placeholders.
Security Review
Review a diff for OWASP-class vulnerabilities that this specific change could introduce -- scoped to what actually applies, with a verify pass before anything is reported.