Skip to main content
AgentGG finds vulnerabilities in source code. Its agents read the code and reason about it. They follow imports, check the call graph, and confirm a finding before they report it. There are two ways to run a scan.

The CLI

Open source. You run it. You bring your own model provider.

The platform

Hosted. No install. Use our model, or connect your own.
Both run the same agents.

agentgg

The CLI, under the Apache 2.0 licence.

agentgg-agents

The agent catalog, under the MIT licence.
The platform is a hosted product and is not open source.

Write your own agent

An agent is one markdown file. Add one for a bug class you care about.