An extremely fast security scanner, written in Rust.

Scans in milliseconds

Written in Rust, with no database to build.

fennec 0.8.1 built-ins vs Semgrep 1.156 & OpenGrep 1.22 (--config auto, identical findings) · median of 3 runs, Apple Silicon · bars animate at true measured wall-clock time ·full comparison vs CodeQL, Snyk & SonarQube →

Cross-file taint analysis

fennec tracks untrusted input across files in eight languages — Python, JavaScript, Go, Java, Ruby, PHP, C#, and Kotlin — linking a source in one file to a sink in another in 0.03 seconds.

from . import queries

def search(request):
    name = request.GET["name"]
    return queries.run_query(name)

def run_query(name):
    cur = db.cursor()
    cur.execute(
        "SELECT * FROM users"
        " WHERE name = '" + name + "'"
    )

Built for your terminal

Readable scan output, plus an interactive TUI. Run fennec tui . to browse findings, read dataflow traces, and dismiss false positives.

terminal

fennec

src/auth/login.js · 2 issues

█CRITICALUntrusted input reaches `db.query`

js/taint-sql-injection (CWE-89)line 14:5

db.query("SELECT * FROM users WHERE id = '" + req.params.id + "'")

█Fix: Use parameterized queries

█HIGHHardcoded JWT secret

js/jwt-hardcoded-secret (CWE-798)line 8:1

const JWT_SECRET = "super-secret-prod-key"

app/views.py · 1 issue

█CRITICAL`request.GET` reaches `cursor.execute`

py/taint-sql-injection (CWE-89)line 52:12

cursor.execute("SELECT * FROM users WHERE id = '%s'" % user_id)

█Fix: Use parameterized queries

3issues1,204 files · 0.14s

2 critical1 high

fennec tui .

Framework-aware by default

Built-in rules understand Express, Django, Flask, and Spring, so a safe idiom won't raise a false alert.

Post-quantum crypto audit, built in

One command flags RSA, ECDSA, ECDH, DH, and DSA across five languages, web-server configs, and six lockfile formats.