logo

AgentGG: Open-source agentic SAST scanner

ID: 9456828d-8612-593f-941b-eb50255e81d3

STIX ID: report--9456828d-8612-593f-941b-eb50255e81d3

Feed Name: Help Net Security

Date Published: 2026-06-05

Date Updated: 2026-06-05

Author: Mirko Zorz

...
...

AgentGG is an open-source, agent-based static application security testing (SAST) tool (Apache 2.0) that runs modular markdown-defined AI agents to scan codebases, follow imports and call graphs, validate findings, and assign CVSS scores. The article covers installation, recon and gating phases, provider/model options, catalog review, validation features (including pentest scope support), and benchmarking results, focusing on tool design and usage rather than any active security incident.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.