I Built a Security Scanner That Uses AI to Review Its Own Findings

Dev.to AI
Generative AI AI Tools

Every AI coding tool ships code fast. None of them check if it's safe. I built Critik - an open-source security scanner that catches what your AI writes and your review misses. Regex and AST find the candidates. An LLM reviews each one with full file context, confirms the real problems, kills the false positives, and explains why in plain English. pip install critik and you're scanning in 30 seconds. The Numbers Are Ugly 53% of teams that shipped AI-generated code later found security issues that passed review.