/
← Voltar ao feed
low

Hacktron launches Hacktron Review, an AI pull-request security reviewer with call-graph analysis

1 fonte(s) · 1 atualização(ões) · publicado 27/04/2026 21:00 · coletado há 4 dias

Hacktron announced Hacktron Review, an AI security reviewer for pull requests. It indexes an organisation's codebases and builds call graphs to find exploitable vulnerabilities before code is merged. The vendor says context-aware analysis lowers false positives and finds issues that Claude and Codex miss. It credits the approach with earlier discoveries of critical 0-days in Next.js, oauth2-proxy, Metabase, OpenAM and BeyondTrust Remote Support. This is product news with no direct threat, and the claims come from the vendor and one customer testimonial (Zellify).

Detalhes técnicos

  • Covers business logic flaws, injection (SQLi, command injection, XSS, SSRF, XXE, LLM prompt injection), memory safety bugs, authentication and authorization flaws, infrastructure-as-code exposures, supply-chain risks (including insecure GitHub Actions) and secrets leaks.
  • Triage comments feed back into the tool as training signal.
  • Findings are auto-closed when a later commit fixes them.
  • Project context can be supplied through a .hacktron/rules.md file.
  • Integrates with Slack and Linear.
  • A free 14-day trial is offered.

Linha do tempo

  1. hacktron.ai ↗ · pub. 27/04/2026 21:00 · coletado 19/10 18:03 primeiro registro

    Hacktron launches Hacktron Review, an AI pull-request security reviewer with call-graph analysis

    ler a análise desta fonte

    Hacktron announced Hacktron Review, an AI security reviewer for pull requests. It indexes an organisation's codebases and builds call graphs to find exploitable vulnerabilities before code is merged. The vendor says context-aware analysis lowers false positives and finds issues that Claude and Codex miss. It credits the approach with earlier discoveries of critical 0-days in Next.js, oauth2-proxy, Metabase, OpenAM and BeyondTrust Remote Support. This is product news with no direct threat, and the claims come from the vendor and one customer testimonial (Zellify).

    Technical Details

    • Covers business logic flaws, injection (SQLi, command injection, XSS, SSRF, XXE, LLM prompt injection), memory safety bugs, authentication and authorization flaws, infrastructure-as-code exposures, supply-chain risks (including insecure GitHub Actions) and secrets leaks.
    • Triage comments feed back into the tool as training signal.
    • Findings are auto-closed when a later commit fixes them.
    • Project context can be supplied through a .hacktron/rules.md file.
    • Integrates with Slack and Linear.
    • A free 14-day trial is offered.