<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Secureflow on Shivasurya</title><link>http://shivasurya.me/tags/secureflow/</link><description>Recent content in Secureflow on Shivasurya</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Fri, 03 Oct 2025 00:00:00 +0000</lastBuildDate><atom:link href="http://shivasurya.me/tags/secureflow/feed.xml" rel="self" type="application/rss+xml"/><item><title>Claude Code for Security Analysis: Introducing SecureFlow CLI to Hunt Security Vulnerabilities</title><link>http://shivasurya.me/2025/10/03/introducing-secureflow-cli-to-hunt-vulnerabilities-claude-code-for-security-analysis/</link><pubDate>Fri, 03 Oct 2025 00:00:00 +0000</pubDate><guid>http://shivasurya.me/2025/10/03/introducing-secureflow-cli-to-hunt-vulnerabilities-claude-code-for-security-analysis/</guid><description>&lt;h2 id="ai-powered-security-vulnerability-hunting-at-scale">AI-Powered Security Vulnerability Hunting at Scale&lt;/h2>
&lt;p>SecureFlow CLI is an open-source agentic SAST security tool that uses AI-powered loops to autonomously hunt for vulnerabilities in codebases. Built on the same principles as Cline/Cursor/Windsurf/Claude-Code for Security Analysis, it leverages LLMs and tools to navigate code, gather context, and identify security issues.&lt;/p>
&lt;h3 id="example-wordpress-plugin-scanning-results">Example: WordPress Plugin Scanning Results&lt;/h3>
&lt;p>The WordPress plugin ecosystem is often overlooked for security scanning despite serving millions of users. Scanning 600+ WordPress plugins with SecureFlow yielded impressive results:&lt;/p></description></item></channel></rss>