GuardScan

Three-layer security scanner for code, URLs, and GitHub repos. Detects secrets, prompt-injection vectors, data-exfiltration paths, and PCI-DSS violations. Free, runs locally.

Run locally

npx @merchantguard/guardscan .

Three layers

• Layer 1: 102 static patterns across 17 categories.
• Layer 2: VirusTotal hash lookup for known IOCs.
• Layer 3: AI judge for context-aware findings (only on suspicious matches).

GitHub Action

name: GuardScan
on: [pull_request]
jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: MerchantGuard/guardscan-action@v1
        with:
          fail-on: critical