I'm a security engineer and started playing around with AI coding tools last year. I noticed a lot of basic security issues: exposed api keys, missing input sanitization, no rate limiting etc. So I built this to scan for them automatically.