OmniUil AI – PQC Scanner/Taint Analysis and Migration Intelligence Rust logo

OmniUil AI – PQC Scanner/Taint Analysis and Migration Intelligence Rust

Show HN: OmniUil AI – PQC Scanner/Taint Analysis and Migration Intelligence Rust

Visit Website
Related by shared tags and keywordsLeviathheadless-terminalToolbay Stack
show-hnAIaiai assistantautomation

Overview

OmniUil AI is a post-quantum cryptographic security platform that scans code for cryptographic vulnerabilities. It is described as "O único scanner de segurança criptográfica pós-quântica com taint analysis, IA local e dashboard empresarial — 100% na sua infraestrutura, sem enviar código para fora da sua máquina." The platform detects 37 built-in PQC rules, including 23 classic rules (RSA, ECDSA, DH, MD5, SHA-1, DES, RC4, JWT none, hardcoded secrets), 10 language-specific patterns (Python, Java, Go, JavaScript, Rust), and 4 hybrid rules (X25519+ML-KEM, ML-KEM, ML-DSA, FN-DSA). It also performs taint analysis to track external data from sources to cryptographic sinks, detecting attacks such as Algorithm Injection in JWT. The tool supports customizable YAML rules, multiple output formats (text, JSON, SARIF 2.1.0), and a REST API with 25 endpoints. It includes five autonomous AI agents that run locally via Ollama, and offers a web dashboard. The platform is available in Free, Starter, Pro, and Enterprise plans, with the core engine (qsec-rust) licensed under Apache 2.0 and the enterprise components under a commercial license.

Pricing

Detailed plans have not been confirmed in our catalog. Check the official website for current limits and billing terms.

Visit Website

Prices and limits may change. Confirm the currency, billing period, seat minimum and usage caps on the official website.

Use Cases

  • Teams use OmniUil AI to scan projects for cryptographic vulnerabilities and generate reports in text, JSON, or SARIF formats.
  • Developers use OmniUil AI to detect taint flows from external sources to cryptographic sinks, such as Algorithm Injection in JWT.
  • Security teams use OmniUil AI to add organization-specific rules via YAML without recompiling.
  • CI/CD pipelines use OmniUil AI to integrate security scanning and upload SARIF results to GitHub Code Scanning.
  • Enterprises use OmniUil AI to generate a CycloneDX 1.5 CBOM for compliance with NIST and CNSA 2.0.
  • Organizations use OmniUil AI to assess third-party vendors with a CNSA 2.0 questionnaire and generate executive reports.
  • Security teams use OmniUil AI to detect cryptographic regressions between consecutive scans via Crypto Drift Detection.
  • CISOs use OmniUil AI to obtain a Quantum Posture Score and a prioritized migration plan with cost estimates in BRL and CNSA 2.0 deadlines.

Features

Post quantum cryptography security scanning

Cryptographic taint analysis

Local AI assisted analysis

Enterprise security dashboard

Runs entirely on your infrastructure

Keeps source code on machine

Post quantum migration intelligence

Reviews

No reviews yet. Be the first to share your experience!

Rankings & collections