Aegis — The Privacy-First AI DevSecOps Side Hustle Powered by Local Open-Source AI
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 2: Side Hustle Team Submission: Krish ( @krishtrue ) Keshav ( @Ikeshav26 ) What I Built Every developer and freelancer knows the feeling: you run a security audit before handing off a project to a client, and suddenly your ter
Hacktoberfest Open-Source AI Challenge Week 2: Side Hustle Submission 💸
This is a submission for the Hacktoberfest Open-Source AI Challenge Week 2: Side Hustle
Every developer and freelancer knows the feeling: you run a security audit before handing off a project to a client, and suddenly your terminal floods with dozens of alerts — leaked API keys, outdated CVEs, SQL injection risks, and unescaped inputs.
Triaging and manually writing code patches for all of them takes hours of tedious context switching.
Large enterprises spend thousands of dollars on tools like Snyk or GitHub Advanced Security. But for freelancers, boutique development agencies, and solo founders, existing solutions present two massive roadblocks:
Aegis is a privacy-first, automated DevSecOps platform and security remediation bot with open-source AI at its very core.
It connects to your GitHub repositories via a GitHub App, triggers asynchronous security scans (Semgrep for static analysis, Gitleaks for secrets, Trivy for dependencies), and uses local open-source AI models via Ollama optimized with Direct Preference Optimization (DPO) to automatically generate surgical code fixes and open pull requests directly on GitHub.