nullbreach / scan

root@nullbreach:~$ scan --target ./src

✦ AI-powered cybersecurity assistant

> Find and understand vulnerabilities before attackers do.

# NullBreach pairs an AI chat with static code analysis to reason about OWASP, threat modeling, and hardening in plain language.

findings.log live
● CRIT 3● HIGH 7● MED 12● LOW 21
  • ●SQL injectionapi/users.ts:42
  • ●XSSrender.tsx:88
  • ●weak JWT algauth.ts:13
▒▒▒▒▒▒▒▒▒▒ scanning… 72%
$ ls ./tools

Offensive and defensive security, in one place

# Tools for developers and security teams.

nullbreach chat

> Cybersecurity chat

Discuss vulnerabilities, attack vectors, and mitigations with actionable context.

nullbreach analyze

> Code analyzer

Submit source code and get static-analysis findings ranked by severity.

nullbreach owasp

> OWASP and threats

Connect risks to OWASP Top 10, attack surfaces, and trust boundaries.

stack.json
$ cat stack.json
{
  "backend": "Prisma · PostgreSQL",
  "frontend": "Next.js · TypeScript",
  "ai": "OpenAI API",
  "auth": "JWT stateless"
}
$ info --technical

Under the hood: modern and decoupled

  • > Static analysis combining deterministic detection with model reasoning.
  • > Per-user persistent conversation history.
  • > Findings with severity and remediation guidance.
● SQL injection● XSS● hardcoded secrets● insecure error handling
OWASP
Top 10 coverage
IA
Specialized chat
SAST
Code analysis
$ history --steps

From question to finding in three steps

  1. 01

    $ nullbreach auth login

    Create your account

    Register and sign in to keep your history separate.

  2. 02

    $ nullbreach scan ./src

    Ask or analyze

    Open a chat or send code to the analyzer for a diagnosis.

  3. 03

    $ nullbreach patch --apply

    Act on findings

    Prioritize by severity and apply the suggested mitigations.

~/nullbreach

root@nullbreach:~$ init

> Ready to harden your code?

Sign in and run your first analysis.

Valentina Ramírez, author of NullBreach
$ whoami

Valentina Ramírez

@wavival

Full-stack developer and author of NullBreach: a Next.js, Prisma, and OpenAI application.