workspace / tools · rule generator

Vulnerability Rule Generator — CVE Grep & Sink Rules

Synthesize sink + grep rules from prior CVE patches, AI agent loops, pattern discovery, or codebase sampling. All four modes feed the rules library.

products
127
total rules
total patterns
languages
00

Choose a generation mode

codebase · agent · basic · pattern
⌕ Codebase analysis
AI samples or agent-browses a product version, learns patterns, validates against the codebase.
◯ Agent generation
Multi-iteration agent uses prior analyses to generate & test rules end-to-end.
✱ Basic generation
Single-pass rule synthesis from selected analyses + CWEs. Fast, no validation loop.
▦ Pattern discovery
Browse known sinks per language + CWE, generate validated patterns against a test version.
01

Select product(s)

single or multi · target version
0 selected
AI agent autonomously browses the codebase, discovers patterns, creates detection rules, and iterates.
02

Select CWE

single CWE · drives the prompt
Loading CWEs…
03

Analyze codebase

AI · learn · validate
AI samples files, identifies patterns, validates them against the codebase.