code-pathfinder
Active·★ 135·AGPL-3.0·Updated 2026-05-29
★ Trending★ Code Assistant★ Security & Safety
AI-Native Static Code Analysis for modern security teams. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP
Code Pathfinder is an open-source, AI-native static code analysis tool that builds a queryable graph of your codebase for security teams. It uses AST, CFG, and DFG to trace data flows across multiple languages and provides context-aware vulnerability detection and triage.
#AI-Native Security#Static Code Analysis (SAST)#Vulnerability Scanner#Data Flow Analysis#Code Graph#CI/CD Security#Developer Tools#Python Security
01
Features
01Structural code analysis using AST, CFG, and DFG to find exploit paths.
02AI-powered vulnerability triage and context-aware validation with LLMs.
03Unified data flow tracing across multiple languages (Python, Docker, Docker Compose).
04Flexible deployment as IDE extension, CLI tool, or integrated into CI/CD pipelines.
02
Compatibility
Python
Language
Verified via docs
Docker
Configuration Language
Verified via docs
Docker Compose
Configuration Tool
Verified via docs
Linux
Operating System
Verified via docs
macOS
Operating System
Verified via docs
Windows
Operating System
Verified via docs
03
Quick start
1
$ pip install codepathfinder
04
Use cases
↳Detect CVEs and conduct vulnerability research by understanding dependency usage and attack surfaces.
↳Provide deep code intelligence (call graphs, data flows) to AI coding assistants like Claude.
↳Perform in-editor security checks to catch vulnerable patterns during code writing.
↳Integrate into CI/CD pipelines for automated security scanning with SARIF output.
05
Alternatives
GitHub MCP Server★ 30.3k
GitHub's official MCP Server. Allows AI agents to interact directly with your GitHub repositories (read files, search code, issues).
Context7★ 56.4k
MCP Server that provides up-to-date code documentation for LLMs and AI code editors.
CopilotKit★ 31.8k
React UI + elegant infrastructure for AI Copilots, AI chatbots, and in-app AI agents. The Agentic Frontend.
Figma-Context-MCP★ 14.9k
MCP server to provide Figma layout information to AI coding agents like Cursor
Related searches
Comments
Log in to leave a comment
- RRemy HarrisMay 17, 2026
Works with the major programming languages and frameworks.
- SSutton KimApr 30, 2026
AI-native static analysis for finding vulnerabilities in modern codebases.
- EEllis MartinezApr 25, 2026
Static analysis combined with AI reduces false positives that tools alone generate.
- OOakley KimMar 31, 2026
Good for security teams who want AI-assisted vulnerability discovery.