Most security tools still use 20-year-old rules. That's why I built Permi.

The Problem

Old-school vulnerability scanners work like this:

• If response matches pattern → safe
• Else → unsafe

That logic was fine in the early 2000s. But modern systems are dynamic, complex, and full of legitimate edge cases. Those same tools now flood you with false positives.

You run a scan. It says 50 "critical" issues. You spend hours filtering. Only 8 are real. That's not security—that's a productivity killer.

What Permi Does Differently

Permi is an AI-powered vulnerability scanner built for today's development workflow.

• Reduces false positives with intelligent filtering.
• Works where you code – CLI now, VS Code & GitHub actions coming soon.
• One command to scan websites or source code.

bash
pip install permi
permi scan --url https://your-site.com

##Early stage, honest feedback needed
Permi is still in early development. It's stable, but you might find rough edges. If something is confusing, broken, or missing:

Comment below or DM me.
Open an issue on GitHub.
Your feedback will directly shape Permi into the tool developers actually need.


  

    

      
      
        Peternasarah
       / 
        permi
      
    
    

      The security signal filter for African fintech engineering teams — precision-first AppSec that removes false positives so developers only see findings that matter.
    
  
  

    

  


Permi


The security signal filter for African fintech engineering teams











What is Permi?


Most security scanners produce hundreds of findings. Most are noise. Developers learn to ignore them — and that is when the real vulnerabilities get missed.

Permi fixes this. It scans your codebase for vulnerabilities, then uses an AI filter to confirm which findings are real before you see them. Your team spends time fixing actual problems instead of chasing false alarms.

Permi also includes rules built specifically for the African development context — USSD gateway vulnerabilities, Paystack and Flutterwave credential exposure, and patterns relevant to Nigeria Data Protection Act compliance. No foreign scanner prioritises this. Permi does.

Built from Jos, Nigeria. For African fintech engineering teams. Then for the world.





Quick Start



pip install permi
permi setup --community    # 50 free AI filter credits — no card needed
permi scan ./myapp


    

    







⚠️ Windows Users — If Permi
…
  
  
View on GitHub


  
  
  Links


PyPI: pip install permi

GitHub: peternasarah/permi

Let's kill false positives together. 🔥 

 Permi CLI scanning a live URL for vulnerabilities