Skip to content

Team Ovi

AI-Powered Security Auditor & Fixer for Docker and host Infrastructure

Code Video Cerebral Valley

Core trick

Runs 11 rule checks and a Trivy CVE scan on Docker, then feeds results to Claude Opus for infrastructure analysis.

Tags

securitydev tools

Description

AI-Powered Security Auditor & Fixer for Docker and host Infrastructure
ovidijusr/shield-ai★ 00 forksTypeScriptCreated Feb 16, 2026 · last push Feb 16, 2026

README excerpt

# ShieldAI

**AI-Powered Security Auditor & Fixer for Docker Infrastructure**

[![Docker Image](https://img.shields.io/badge/docker-ghcr.io-blue?logo=docker)](https://github.com/ovidijusr/shield-ai/pkgs/container/shield-ai)
[![License](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)

ShieldAI is a self-hosted security auditor for Docker environments that combines automated rule-based checks, CVE vulnerability scanning, and AI-powered infrastructure analysis to help you secure your containers.

## ✨ Features

- 🔍 **Three-Phase Security Pipeline**
  - Instant quick checks (11 automated security rules)
  - CVE vulnerability scanning powered by Trivy
  - AI-powered infrastructure analysis with Claude Opus

- 🛡️ **Comprehensive Security Analysis**
  - Exposed port detection
  - Privileged container identification
  - Secret leakage detection in environment variables
  - Dangerous host mounts and volume analysis
  - Network isolation validation
  - Resource limit checks

- 🤖 **AI-Powered Insights**
  - Context-aware security recommendations
  - Infrastructure topology analysis
  - Service identification (PostgreSQL, Redis, etc.)
  - Risk prioritization with 0-100 security scores

- 🔧 **One-Click Fixes**
  - Automated fix generation for compose files
  - Diff preview before applying changes
  - Automatic backups and rollback on failure
  - Safe, reviewed modifications

- 📊 **Tracking & Monitoring**
  - Security score trends over time
  - Scheduled scans (daily/weekly)

Team