最后更新：11/8/2026最后核验：2026-11-04
<p>OpenHack 将安全工作串成发现、验证、排序与修复的流程。它读取代码与业务上下文，调查访问控制、认证、依赖和业务逻辑等问题，利用浏览器或沙箱核验可利用性，并准备修复 PR。平台还提供持续扫描、漏洞管理和 GitHub、Slack、Linear 集成。免费方案限一个项目、每月五次 PR 安全审查及一次完整扫描；完整平台、自动修复和企业控制采用定制定价。开源 CLI 的沙箱验证仍为 Beta，需要 Docker；推理提示词会发送给所选模型供应商，处理敏感代码前应审查其数据政策。本文依据官方产品、发布说明、定价页与仓库核验，未对任何代码库或线上系统发起扫描。</p><ul><li>AI 代码库扫描与 PR 安全审查</li><li>通过浏览器与沙箱调查、核验疑似漏洞</li><li>结合可利用性与业务上下文确定处理优先级</li><li>准备修复 PR，并接入团队的 GitHub、Slack 和 Linear 工作流</li></ul>
详情
平台
网页版
功能特性
- AI codebase scanning and pull-request security reviews
- Investigate suspected vulnerabilities with browser and sandbox verification
- Prioritize exploitable findings using application and business context
- Prepare fix pull requests and connect workflows with GitHub, Slack, and Linear
支持语言
en
适合人群
Development teams reviewing pull requests for exploitable security flawsStartups seeking code scanning and guided vulnerability remediationSecurity teams consolidating findings, pentesting, and business-aware prioritization
已知限制
- The free plan covers one project, five PR reviews per month, and one one-time full scan
- Continuous platform capabilities, autofix, and enterprise controls use custom Enterprise pricing
- CLI sandbox verification is beta and requires Docker
- CLI prompts go to the selected inference provider; review its data policy before scanning sensitive code
替代工具
OSS Scanner — Periodic AI vulnerability reports for eligible open-source projects
AiSOC — Self-hostable agent-assisted security telemetry and incident investigation
