Secure Code

SecureBob AI is an AI-powered DevSecOps security assistant built using IBM watsonx.ai and Granite foundation models that helps developers identify vulnerabilities, exposed secrets, insecure configurations, and risky pull request changes before insecure code reaches production. The platform combines AI-driven security analysis with beginner-friendly explanations to make cybersecurity accessible for students, developers, startups, and hackathon teams. The system performs comprehensive GitHub repository scanning, secret leak detection, pull request security reviews, vulnerability analysis, and AI-powered remediation suggestions. SecureBob AI can detect common security risks such as SQL Injection, Cross-Site Scripting (XSS), hardcoded credentials, weak JWT secrets, open CORS policies, insecure authentication logic, unsafe file uploads, and exposed API keys or cloud credentials. Unlike traditional security tools that are often difficult for beginners to understand, SecureBob AI explains vulnerabilities in simple natural language and provides actionable recommendations to fix them securely. The platform also includes a security score dashboard with risk analytics, severity breakdowns, and interactive reports to help developers understand the security posture of their applications. The project is built with a modern full-stack architecture using Next.js, Tailwind CSS, Framer Motion, FastAPI, Python, and IBM watsonx.ai APIs, creating an interactive cybersecurity platform focused on AI-assisted secure development and educational DevSecOps workflows.