Open-source security workflows in your browser or coding agent.
Backed by Y Combinator · The Swiss Applied AI & Cybersecurity Research Lab
0.security ·
Documentation ·
FoxGuard
Install on Apple Silicon macOS or x64/ARM64 Linux:
curl -fsSL https://raw.githubusercontent.com/0sec-labs/0/main/install.sh | bash
export PATH="$HOME/.0/bin:$PATH"
0 webCommand Center (browser): 0 web · Terminal: 0
Configure a model provider before running AI workflows.
Browser, CLI, and MCP share one workflow runner with retained results.
Findings are prioritized by business impact: affected customers and data, fraud, critical services, and disruption. Each priority includes a rationale; missing context stays Not assessed. CVSS remains available as technical severity.
| Work | Built-in templates |
|---|---|
| Assess | Repositories, dependencies, APIs, web configuration, scoped penetration tests, package behavior, smart contracts, native code |
| Verify | Findings with replay evidence |
| Fix | Candidates with regression tests |
| Research | Security research, deep source investigation |
Start from 12 templates, customize steps, and run manually or with browser triggers and schedules. Template: starting point · Workflow: reusable steps · Run: one execution.
Learning retains local run activity, source-grounded notes and evaluated
improvement history. Saved workflows keep immutable revisions and support restore.
Use 0 learning status or open Learning in the browser.
Learning documentation.
0 workflow list --templates
0 workflow run --template security-research \
--target /absolute/path/to/repo --workspace /absolute/path/to/repo \
--format json > run.json
0 runs listWorkflow guide: inputs, limits, and results.
A source review of the included demo API, with code locations and suggested fixes.
Start a workflow from a template and edit its steps.
Use the CLI commands above, or MCP


