DEV Community

Cover image for CodePulse AI: Real-Time Visual Architecture & API Security Auditor 🛡️⚡
Aditya Verma
Aditya Verma

Posted on

CodePulse AI: Real-Time Visual Architecture & API Security Auditor 🛡️⚡

#ai #python #hacktoberfest

What is CodePulse AI?

Modern cloud infrastructure and microservices are growing too complex for manual security reviews. CodePulse AI is an open-source, local-first DevSecOps agent designed to bridge that gap. By combining local vision-language models (powered by Gemma 4 via LM Studio) with a FastAPI backend and Next.js frontend, CodePulse AI takes any architecture diagram or API flowchart, analyzes its visual topology, detects security vulnerabilities, and instantly generates concrete Kubernetes NetworkPolicy or Terraform remediation patches.

Key Features

  • Private & Local-First Intelligence: Executes visual threat modeling locally on your machine using Gemma 4, ensuring sensitive enterprise diagrams never leave your hardware.

  • Intelligent MIME-Type & Payload Normalization: Built with a robust backend pipeline that resolves multi-format vision constraints (such as normalizing webp/png payloads) to guarantee seamless local VLM parsing.

  • Tiered Fallback Engine: Features a resilient multi-tier architecture (Local Gemma 4 → Cloud Gemini 2.5 Flash → Anti-Gravity Autonomous Safety Net) ensuring 100% uptime during live demos.

  • Actionable Remediation: Doesn't just find vulnerabilities (like unprotected gateways or plaintext database connections)—it automatically writes the exact infrastructure code required to fix them.

How It’s Built (Tech Stack)

  • Frontend: Next.js, Tailwind CSS (Interactive Drag-and-Drop Audit Control Panel)

  • Backend: FastAPI, Python, Pydantic, Pillow / Image Normalization Pipelines

  • AI / Vision Inference: Local Gemma 4 running via LM Studio (/v1/chat/completions vision endpoint) with Google AI Studio cloud backups.

Demo Workflow

  1. Drag and drop any microservice topology or system architecture diagram into the web dashboard.

  2. The FastAPI backend normalizes the image stream and pings the local Gemma 4 vision model.

  3. CodePulse AI scans the nodes and outputs a comprehensive threat report complete with a Security Risk Score, detailed vulnerabilities (e.g., OWASP Top 10 vectors), and ready-to-deploy YAML patches.

GitHub Repository
Built For: Global Hack Week & Hacktoberfest 2026 Open-Source AI Challenge.

Top comments (0)