Netherite Launches AI Code Security Scanner for Any Codebase

Summary

Netherite is an AI-powered code security service designed to review an entire repository as a security engineer would. It reports issues with the affected file and line, explains the reasoning behind each finding, and provides a scoped fix prompt that developers can paste into a coding agent. The sample report includes a timing-sensitive session-token comparison, webhook signature verification performed after parsing and persistence, an unbounded multipart upload, and production logging of email addresses. Netherite says repositories are read over an encrypted connection only for the duration of the review, that code is not retained after the report is written, and that it is not used for purposes beyond the customer’s findings. The site invites users to try the service and lists seven vulnerabilities found since launch, but does not provide broader evaluation results or identify the underlying AI model.