WRECKED

Wrecked is a tool designed to help developers find and fix security problems in their code. It works by automatically scanning code for vulnerabilities and misconfigurations. Developers can easily submit their code by providing a link to a GitHub repository or by uploading a ZIP file.

Benefits

Wrecked makes security checks fast and simple. It uses ten different scanners that work at the same time to quickly analyze code. After scanning, an AI explains any security issues found in easy to understand language and suggests ways to fix them. The tool also gives the code a letter grade, from A to F, so users can quickly see how secure their code is.

Use Cases

This tool is useful for developers who want to ensure their code is secure. It can be used to check public GitHub projects or private code uploaded as a ZIP file. The scanners look for many types of security risks, such as secrets accidentally included in code, outdated or vulnerable software packages, and incorrect settings in cloud infrastructure code. It also checks for common web application flaws like injection attacks and issues specific to certain programming languages or tools like Python, Docker, and Node.js.

Pricing

Wrecked offers a free option that allows scanning public repositories and ZIP files. This free scan shows the top security findings and a grade. For a one-time fee of $4.99, users can get AI explanations and suggested fixes for all findings. A Pro plan is available for $9.99 per month, which includes unlimited AI explanations, more scanning capacity, and support for larger projects.

Vibes

When Wrecked scans code, it provides a clear grade and detailed findings. For example, a scan of OWASP Juice Shop resulted in an 'F' grade, highlighting issues like SQL Injection, hardcoded secrets, and cross-site scripting. The reports show exactly which scanner found the problem and where it is located in the code, making it easier to address the security flaws.

Additional Information

The scanning process involves several steps. First, the code is submitted. Then, ten specialized scanners, including Semgrep, Gitleaks, npm audit, and Trivy, run simultaneously. Next, an AI explains the vulnerabilities and offers solutions. Finally, the code is given a grade based on the severity of the issues found.