Home 零对冲(ZeroHedge)每日HackerNews

展示HN：Detail，一个漏洞查找器
Show HN: Detail, a Bug Finder

原始链接: https://detail.dev/

Detail 是一款由人工智能驱动的代码分析工具，旨在主动识别代码库中的错误和安全漏洞。许多 CTO 和工程领导者，包括 OpenRouter、Semgrep、Vanta、Mastra、Sourcegraph、Gravity 和 Notion 等公司的领导者，都表示 Detail 能够发现之前测试方法（包括渗透测试）遗漏的真实、通常是微妙且复杂的错误。 这些错误范围从潜在的 CPU 消耗问题到关键 API 端点的缺陷，从而导致立即修复并提高代码质量。用户称赞 Detail 具有高信噪比和可操作的反馈。 Detail 的工作原理是安全地克隆您的代码仓库，运行数千项检查，并将详细的错误报告直接传递到您首选的问题跟踪系统（Linear、Jira、GitHub Issues 或电子邮件）。它对企业友好，并通过了 SOC 2 Type II 认证，并具有零数据保留策略。您可以免费试用 Detail。

## 细节：一款新型AI驱动的漏洞发现工具 Detail (detail.dev) 是一款旨在主动发现现有代码库中错误——甚至漏洞——的新工具，尤其适用于应用程序后端。由drob团队开发，最初的目标是利用AI自动化测试编写来解决技术债务。虽然在生成大量测试方面取得了成功，但他们发现该系统更擅长*发现*现有的错误。 Detail 的工作原理是检出代码库，在本地构建，然后并行运行数千个测试。它识别出意外行为，并将结果以清晰的工单或问题形式呈现。该过程计算量大，每次扫描需要数小时，但通过突出显示高影响问题来优先考虑工程师的关注点。 早期用户已经在生产代码中发现了严重的错误，即使在渗透测试之后也是如此。Detail 支持多种语言（包括 Rust），并提供首次免费扫描。开发者还为开源仓库提供扫描服务，私下向维护者提供结果。他们认为，随着AI生成代码越来越普遍，对代码库的理解越来越少，像Detail这样的工具将变得越来越重要。
相关文章
原文

Your codebase is full of bugs.

Let us show you.

Deep scans of your codebase that find bugs you’ll be glad to know about. Security vulnerabilities, data loss, billing mistakes.

Try For Free

Try For Free

Try For Free

Talk to an Engineer

Talk to an Engineer

Talk to an Engineer

Daniel Worku

CTO @ StarSling

We have Graphite, Codex, Cubic, Gemini and Cursor Bugbot running on PRs and the results from our Detail scan still gave me a minor heart attack.

Chris Clark

COO @ OpenRouter

What sorcery is this?!?

Drew Dennison

CTO @ Semgrep

This thing found real bugs that we fixed immediately. It actually works.

Mitali Palekar

Tech Lead @ Vanta

Consistently great reports about latent bugs in our codebase. Incredibly high signal-to-noise ratio.

Sam Bhagwat,

CEO @ Mastra

Detail found some really sneaky bugs. Mastra is a more solid framework now.

Beyang

CTO @ Sourcegraph

Detail flagged multiple high priority issues in Amp that I fixed immediately. I’d recommend it to any fast moving team that is rapidly adopting agents and is serious about maintaining a high quality bar.

Ted Kornish

CTO @ Gravity

Detail found subtler and more pernicious issues than our most recent pen test, faster, with more actionable feedback. Rad.

Alex Atallah,

CEO @ OpenRouter

Detail found some beautiful bugs that involved traversing multiple layers of complexity, all without help from our team, including one that could have consumed CPU indefinitely. Powerful AI ally.

Ben Kraft

Eng @ Notion

Detail found subtle bugs in critical API endpoints and user flows, in one case even spawning a new project to make our frameworks more correct by default.

Chris Clark

COO @ OpenRouter

What sorcery is this?!?

Alex Atallah,

CEO @ OpenRouter

Detail found some beautiful bugs that involved traversing multiple layers of complexity, all without help from our team, including one that could have consumed CPU indefinitely. Powerful AI ally.

Beyang

CTO @ Sourcegraph

Detail flagged multiple high priority issues in Amp that I fixed immediately. I’d recommend it to any fast moving team that is rapidly adopting agents and is serious about maintaining a high quality bar.

Mitali Palekar

Tech Lead @ Vanta

Consistently great reports about latent bugs in our codebase. Incredibly high signal-to-noise ratio.

Sam Bhagwat,

CEO @ Mastra

Detail found some really sneaky bugs. Mastra is a more solid framework now.

Drew Dennison

CTO @ Semgrep

This thing found real bugs that we fixed immediately. It actually works.

Ben Kraft

Eng @ Notion

Detail found subtle bugs in critical API endpoints and user flows, in one case even spawning a new project to make our frameworks more correct by default.

Ted Kornish

CTO @ Gravity

Detail found subtler and more pernicious issues than our most recent pen test, faster, with more actionable feedback. Rad.

Chris Clark

COO @ OpenRouter

What sorcery is this?!?

Sam Bhagwat,

CEO @ Mastra

Detail found some really sneaky bugs. Mastra is a more solid framework now.

Alex Atallah,

CEO @ OpenRouter

Detail found some beautiful bugs that involved traversing multiple layers of complexity, all without help from our team, including one that could have consumed CPU indefinitely. Powerful AI ally.

Drew Dennison

CTO @ Semgrep

This thing found real bugs that we fixed immediately. It actually works.

Beyang

CTO @ Sourcegraph

Detail flagged multiple high priority issues in Amp that I fixed immediately. I’d recommend it to any fast moving team that is rapidly adopting agents and is serious about maintaining a high quality bar.

Ben Kraft

Eng @ Notion

Detail found subtle bugs in critical API endpoints and user flows, in one case even spawning a new project to make our frameworks more correct by default.

Mitali Palekar

Tech Lead @ Vanta

Consistently great reports about latent bugs in our codebase. Incredibly high signal-to-noise ratio.

Ted Kornish

CTO @ Gravity

Detail found subtler and more pernicious issues than our most recent pen test, faster, with more actionable feedback. Rad.

See it on Open Source

26k

GO

tailscale/tailscale

7 bugs flagged

/

5 fixed

26k

GO

tailscale/tailscale

7 bugs flagged

/

5 fixed

26k

GO

tailscale/tailscale

7 bugs flagged

/

5 fixed

2.2k

TYPESCRIPT

kubernetes-client/javascript

3 bugs flagged

/

3 fixed

2.2k

TYPESCRIPT

kubernetes-client/javascript

3 bugs flagged

/

3 fixed

2.2k

TYPESCRIPT

kubernetes-client/javascript

3 bugs flagged

/

3 fixed

136k

JAVASCRIPT

vercel/next.js

1 bug flagged

/

1 fixed

136k

JAVASCRIPT

vercel/next.js

1 bug flagged

/

1 fixed

136k

JAVASCRIPT

vercel/next.js

1 bug flagged

/

1 fixed

86k

GO

google-gemini/gemini-cli

2 bugs flagged

/

1 fixed

86k

GO

google-gemini/gemini-cli

2 bugs flagged

/

1 fixed

86k

GO

google-gemini/gemini-cli

2 bugs flagged

/

1 fixed

more repos

more repos

more repos

How It Works

Add your repo.

Detail will clone it to a secure sandbox and confirm we can build your code properly.

Detail exercises your code.

Detail runs thousands of checks and diagnostics, looking for bugs and selecting the most significant ones.

Receive bugs.

Detail sends you a writeup for each bug we find. Delivered to Linear, Jira, GitHub Issues, or email.

Enterprise Friendly

SOC 2 Type II Certified

Highest standards of compliance with industry best practices. Audit report available upon request.

Zero Data Retention

All code and usage data can be purged based on your requirements. Our model providers retain nothing.

联系我们 contact @ memedata.com