Scan code for IPs, domains, hashes, and CVEs against the DugganUSA threat intelligence index. AIPM audit any domain's AI presence. All inside VS Code. Free.
Beta — free while it lastsEvery IP, domain, SHA256 hash, and CVE ID in your code — checked against 1.5M+ indicators in real-time. Known-bad indicators appear as inline warnings with enrichment details.
Scans on open and on save. No manual step. IOCs are checked as you work.
Select any text. Right-click. Instant enrichment from 44 cross-correlated indexes.
Audit any domain's AI presence directly inside VS Code. 5 models. 7 signals. 15 seconds.
Scan your entire project for threat indicators. One command. Up to 50 files.
Windows, macOS, Linux, WSL, Remote SSH, Codespaces, vscode.dev. Also works on Cursor and Windsurf.
Only IOC values sent to the API. Never source code. Never file paths. Open source — inspect the code.
Headings: Inter 700/800 · Body: Inter 400/500 · Code: JetBrains Mono 400/600
Primary CTAs use a sweeping light animation (CSS shimmer keyframe) that mimics water reflection — triggers the lizard brain's attention-seeking firmware. 4s cycle, accelerates to 1.5s on hover. Applied to all .btn-primary elements across DugganUSA properties.
Direct. Technical. Named entities. Specific numbers. Opinions stated flat, not hedged. "We had the CVE before they published" not "we may have had early visibility." Lead with receipts. The 95% epistemic humility cap means we never claim perfection — but we don't apologize for being fast.
Same engine. Every surface where developers and security teams work.
The VS Code extension is one surface of the DugganUSA threat intelligence platform. Same IOC index. Same STIX feed. Same team. Different distribution.