AI Security Engineer
AI-Powered Code Vulnerability Scanner
A full-stack security analysis tool that runs a locally-hosted LLM (Ollama) against a RAG pipeline built on CWE and OWASP knowledge bases, detecting and explaining vulnerabilities in uploaded source code. The RAG pipeline grounds vulnerability explanations in retrieved CWE/OWASP reference material, improving accuracy over raw LLM output. Semantic retrieval is handled with FAISS; findings are returned as structured JSON and rendered into a downloadable PDF report, with async file uploads and CORS configured in FastAPI to support scanning of multi-file codebases.
- React
- FastAPI
- Ollama
- FAISS
- PostgreSQL
- RAG