I’ve been building CyBox Security a platform that acts like a virtual security team for developers.

It combines multiple security scanners into one unified dashboard, covering SAST, SCA, IaC, and Secrets in a single workflow.

The idea came after seeing how many small dev teams and startups don’t have dedicated security staff, yet still need continuous scanning and clear remediation guidance. CyBox integrates with GitHub and stores only scan results (no source code).

It’s still early (MVP stage), but it already works, you can sign up, connect a repo, and see scan results in minutes.

Would love your feedback, use cases, and what matters most for you when using security tools.

Thanks