// security reviews · bring your own agent

Your code.
Your findings.
Your machine.

Give your agent a better way to review security. We supply the checks, investigation tips, and report tools. Your agent does the work where your code lives, and you keep the results.

Use with your agent See an example report ↗

Free guidance for a local review. Your findings stay with you.

// What goes where

From DeepNoodle to your agent

Review instructions, tool suggestions, and a small report kit.

On your side

Your code, test runs, notes, findings, and finished reports.

Your report stays with you

// why we built it this way

A useful review shouldn’t need another copy of your vulnerabilities.

Security findings can reveal exactly where a system is weakest. This workflow gives you help with the review method while your system details remain in your own environment.

Our contribution is knowing what to look for, how to investigate it, and how to turn observations into fixes. That can travel to your agent. Your evidence can stay with you.

Keep what you learn.

Save the report in your own files, share it with your team, or use it to plan the next release. You decide who sees it.

// the MCP tools

Four tools. A clearer review.

Every tool returns public guidance or files. None accepts findings, stores progress, or runs commands on your system.

Choose the right checks

get_review_guidance

Get a review plan for broad app features and stack. Send only the listed categories, never project details, code, findings, or results.

Work through one check

get_check_details

Get investigation steps, suggested tools, evidence requirements, and a prompt for one published check ID. Interpret the results locally.

Keep the review moving

get_review_workflow

Get a procedure for scoping, testing, recording evidence, resuming work, and retesting fixes. Keep all progress and decisions in local files.

Make a report on your machine

get_report_kit

Get download URLs, SHA-256 hashes, the report format, and instructions for a local HTML/Markdown report builder. This tool accepts no report data.

// get started

Connect. Review. Keep it local.

Add this public URL as an HTTP MCP server in your agent and connect directly.
Give the agent access to your code in your own environment, then agree what it may inspect and test.
Ask it to follow the review procedure, keep notes locally, and build a report when it’s done.

https://deepnoodle.ai/security/mcp

Your agent supplies its own code and terminal tools and manages the review session. MCP supplies the guidance.

// the local report kit

A report you can open offline.

Your agent downloads a small script, stylesheet, and report format. It runs the script with your local notes to create an HTML report and Markdown copy. Nothing is submitted to DeepNoodle.

The self-contained HTML bundles its own styles and opens locally in your browser, ready to print as a PDF.

Script Styles Report format Fictional example

Requires Node 22 or later. Inspect downloaded scripts before running them. The MCP tool supplies hashes so your agent can check the files.

Open the example report ↗

// a few useful distinctions

What does DeepNoodle see?

Does the report mean my app is secure?

Can I still get a second opinion?

Hands-on security reviews →Prefer a checklist? Open the planner →

Your code.Your findings.Your machine.