Founder and CEO of Sentinel Phish AI. Passionate builder and solo founder.

devto

github

Kien Tran • Peerlist

<h3>Autonomous AI Vulnerability Engine</h3>BugZ is an advanced AI-powered security engine designed to automate static application security testing (SAST) workflows. It offers instant Git ingestion, allowing you to point BugZ at any public repository or file for immediate analysis. The engine crawls directories, prioritizes entry points, and analyzes structural context to identify security vulnerabilities.<ul><li>Instant Git Ingestion: Seamlessly import GitHub repositories or files for analysis.</li><li>Real-time AST Security Analysis: Stream security analysis as the Abstract Syntax Tree (AST) is processed.</li><li>AI Vulnerability Radar: Leverages Gemini Pro to audit code contextually, detecting hardcoded API secrets, SQL injections, broken access controls, and path bypasses.</li><li>Unified Git Diff Exporter: Generates standard Unified Git patches for identified vulnerabilities, allowing for one-click application using 'git apply'.</li><li>Zero-Configuration SAST: No complex environment setups or custom parser configurations are required.</li><li>Autonomous Security Assistant: Automates SAST workflows, providing secure, one-click patch files to address code flaws rapidly.</li></ul>With BugZ, you can secure your codebases autonomously, ensuring that vulnerabilities are identified and patched before they can be exploited by malicious actors. The platform boasts impressive metrics, including over 12.4 million lines of code audited and more than 42,850 vulnerabilities patched, all with deep AI audits completed in under 20 seconds.

BugZ — Autonomous AI Vulnerability Engine

SentinelPhish is a lightweight, real-time URL scanner engineered to inspect suspicious links safely before you open them.### Why SentinelPhish?Most URL reputation checkers rely on static blacklists that are often 24–48 hours behind newly registered domains. By the time an automated database flags a phishing domain, the attack campaign has usually already succeeded.Enterprise security tools exist, but they are often locked behind sales walls, mandatory trials, or slow sandbox loading queues. SentinelPhish provides an open, instant alternative: drop a link, analyze the evasive vectors, and get an immediate verdict.### Key Features* Multi-Hop Redirect Tracing: Follows shortened URLs and dynamic redirect chains to inspect the final destination.* Heuristic Threat Detection: Scans page structures, brand-spoofing patterns, and fake login inputs designed to harvest credentials.* Homoglyph &amp; Typosquat Flagging: Catches subtle character swaps and lookalike domains intended to deceive users.* Instant Verdict: Delivers a clean risk assessment instead of dumping raw, confusing log files.* Zero Signup Wall: Open utility available directly from the browser without an account required.### Built For* Developers and security engineers triaging suspicious webhooks, alerts, or links.* Teams needing a quick sanity check for questionable internal or external emails.* Everyday users verifying urgent notifications before entering credentials.### Live App<a target="_blank" rel="noopener noreferrer nofollow ugc" class="break-all link-break text-gray-500 hover:underline" href="https://sentinelphishai.vercel.app">https://sentinelphish.com</a>

Sentinel Phish AI

Designed, architected, and deployed an automated, AI-powered resume auditing SaaS platform tailored specifically for software engineers to translate technical execution into recruiter-ready impact metrics. State-of-the-Art UX/UI: Built a responsive, dark-themed interface utilizing Next.js (App Router) and Tailwind CSS with modern glassmorphism design aesthetics. Real-Time Infrastructure: Integrated Convex as a real-time reactive database layer to ensure zero-latency state synchronization and fluid document persistence. AI Engine & Identity: Structured automated structural evaluation logic leveraging the Gemini API for deep-dive technical audits, while securing user sessions and authentication via Clerk. Secure Pipeline Deployment: Maintained strict security protocols (local TLS verification enforcement) and engineered a robust, automated CI/CD deployment pipeline via GitHub and Vercel cloud architecture.