Epherem

Epherem is a free source code scanner built for non-coders who have created applications using AI.

The idea for Epherem came about when I was preparing to launch another product, a marketplace for university students and SMEs. As I was getting ready to ship, I started looking into the security risks of AI-built applications, which had become a growing concern.

I tried several security tools, but most of them were built with developers in mind. I could run the scans, but I struggled to understand what the results actually meant or what I was supposed to do about them. The simpler tools I found mainly scanned a website's URL, rather than the source code itself.

That's when I decided to build Epherem.

I spent the next four months working on it, often day and night, with the help of a friend who was experienced in cybersecurity. Claude played a large role in building both the scanner and the interface. Since I'm not a developer myself, a lot of the process involved learning things as I went along.

Initially, I planned to charge for Epherem. However, the more I worked on it, the more I felt that a basic source code security scanner should be accessible to anyone building software, especially those who don't have a technical background.

So I decided to release it for free.

Epherem is still in its early stages, and I'm hoping to learn more about what people actually need by speaking to those who use it. I'd especially appreciate hearing whether the findings make sense, what could be improved, and what problems you've faced when securing your own applications.

If you give Epherem a try, I'd love to hear your thoughts. Enjoy your scans!