Skip to content

Codex-Astartes

Codex-Astartes is a security validation platform for web apps and APIs.

Core trick

A FastAPI endpoint runs bounded, allowlisted OWASP probes against a URL and correlates runtime results with static code signals.

Tags

Description

Codex-Astartes is a security validation platform for web apps and APIs. It combines a FastAPI scanner (POST /scan) for quick URL checks with a deeper multi-agent assessment pipeline that analyzes runtime behavior, codebase signals, and policy constraints to produce evidence-backed security findings. Key Features OWASP-focused coverage (Top 10 categories) with categorized findings and remediation guidance. Evidence-first workflow: profiling, surface mapping, static/runtime checks, correlation, and deduplication. Built-in safety guardrails: scope controls, allowed domains, bounded probing, and non-destructive defaults. Demo UX included: React frontend “Sample Explorer” for vulnerability sample endpoints and testable security scenarios.

Team