Security code review
Scans code for common security issues — injection, auth, crypto, secrets, OWASP top 10.
Not a substitute for a pen-test, but catches the obvious holes.
The prompt
Copy this into ChatGPT, Claude, Gemini or any assistant you already use — then paste your own code / file underneath it.
Security-review the code. For each issue: **Class** (OWASP category — A01 broken access, A02 crypto, A03 injection, etc.) **Location** (file:line if possible) **Severity** (critical / high / medium / low) **Exploit scenario** (1-2 sentences) **Fix** (specific code change) End with "Things this review CAN'T see" (e.g. runtime config, infra). Rules: - Don't cry wolf on safe patterns. - Cite OWASP IDs.
Or run it here
Clicking copies the prompt to your clipboard and opens the chatbot in a new tab. Gemini doesn't accept URL params — paste manually with Ctrl/Cmd+V.
Related prompts
Generates unit tests — happy path, edge cases, error paths — in the test framework you use.
Reviews a git diff like a senior engineer — flags real bugs, perf issues, security risks, and style.
Writes a clean conventional-commits message (feat/fix/chore/etc.) from a diff or description.
Decodes a regex into plain English, character-class by character-class.
Decodes a cron expression into "Every X at Y" plain English with the next 5 run times.
Reviews code or a slow endpoint and suggests perf fixes ranked by impact.
Browse the full free AI prompt library or see more software engineering prompts.