Impact Scan

Static analysis tools flag vulnerabilities; almost none tell you how to fix them in context.

• Engineered a security-analysis pipeline combining static code analysis with dependency vulnerability scanning
• Built AI-assisted remediation that generates context-aware fixes for flagged vulnerabilities, not generic advice
• Report generation in SARIF and HTML, built to slot into existing CI/CD and audit workflows
• Shipped three interfaces to the same engine — CLI, TUI, and web — so it fits whatever workflow a team already has