Codex-Astartes
Codex-Astartes is a security validation platform for web apps and APIs.
Core trick
A FastAPI endpoint runs bounded, allowlisted OWASP probes against a URL and correlates runtime results with static code signals.
Tags
Description
Codex-Astartes is a security validation platform for web apps and APIs. It combines a FastAPI scanner (POST /scan) for quick URL checks with a deeper multi-agent assessment pipeline that analyzes runtime behavior, codebase signals, and policy constraints to produce evidence-backed security findings.
Key Features
OWASP-focused coverage (Top 10 categories) with categorized findings and remediation guidance.
Evidence-first workflow: profiling, surface mapping, static/runtime checks, correlation, and deduplication.
Built-in safety guardrails: scope controls, allowed domains, bounded probing, and non-destructive defaults.
Demo UX included: React frontend “Sample Explorer” for vulnerability sample endpoints and testable security scenarios.