Sandchest

About

Sandchest is a GitHub app that scans repositories for security vulnerabilities using unrestricted language models. It maps each repo into a threat model, reviews pull requests with comments on the exact lines, runs deep scans, and closes a finding once its attack path is gone. Each finding includes the attack path, a proof of concept, fix requirements and a prompt for a coding agent. The scanner has read-only access, no shell and no network.