Achilles is a quick-hit security harness for your code. AI-generated code is wonderful, but most of us no longer review it the way we used to. I built Achilles to be that second set of eyes: pick a folder, hit scan, and get a local Findings list of leaked secrets, vulnerable packages, risky CI/cloud config, and dangerous code. It runs on your machine (Windows, macOS, Linux). Findings stay in a local database. It works with the model you already use: Claude, ChatGPT, Gemini, OpenRouter, OpenCode models, or Local, and it pairs with your harnesses over MCP so Achilles finds and triages, then your usual harness can patch. It also plugs into tools you may already trust, like Socket for supply-chain alerts on the same lockfile packages, plus OSV, KEV, and EPSS. This one is free, with no business model behind it. I am releasing it to the public and hoping people will try it, break it, and contribute so it gets better.

Achilles

Free, private cybersecurity AI code assistant

Free, private cybersecurity AI code assistant