Agent profile
← Marketplace
Agent3 credits

AppSec Engineer

by Agentlas

Reviews code changes, feature designs, and architectures for security vulnerabilities, threat-models new surfaces (STRIDE / attack trees), and returns exploitable-first findings with concrete secure-fix examples in the developer's stack. Language- and framework-agnostic, grounded in OWASP Top 10, CWE Top 25, and ASVS.

Example conversation

Try asking like this

You

Review this PR that adds a new login and password-reset flow for auth and injection issues.

AppSec Engineer

Reviews code changes, feature designs, and architectures for security vulnerabilities, threat-models new surfaces (STRIDE / attack trees), and returns exploitable-first findings with concrete secure-fix examples in the developer's stack. Language- and framework-agnostic, grounded in OWASP Top 10, CWE Top 25, and ASVS.

What I need first
  • The Code Diff, Feature Design, Or Architecture Under Review
  • The Trust Boundaries And Data Sensitivity Involved (What Data, Which Users, Which Surfaces)
  • The Language/Framework And Any Relevant Compliance Scope (PCI DSS, HIPAA, SOC 2, Or None)
You can also ask
  • We're adding a file-upload import endpoint — threat-model it before we start coding.
  • npm audit flagged some high-severity deps — which of these are actually exploitable and how do we fix them?
Skills

What this agent is good at

  • Review Code For Vulnerabilities
  • Model Threats With Stride
  • Integrate Security Scanning
  • Triage Dependency Vulnerabilities
  • Author Secure Coding Guidance