[ about ekmire ]
The developer security platform for AI-era codebases.
ekmire detects MCP tool poisoning, prompt injection, hardcoded secrets, and SQL injection at three points in your workflow — the IDE buffer, the git commit hook, and the production request edge. One platform, no SDK to integrate, no agent to babysit.
[ origin ]
Why AI-era codebases need a new security approach.
AI coding assistants generate code faster than developers can review it. That speed introduces a new class of vulnerabilities: hardcoded API keys Copilot auto-completes, SQL injection patterns in LLM-generated queries, MCP tool poisoning attacks that override your IDE's instructions, and prompt injection payloads that reach your production API in user requests.
Existing tools aren't built for this. Traditional WAFs block known exploit signatures but miss semantic attacks. SAST scanners run in CI — minutes after the code is already written and committed. IDE linters don't understand security context at all.
ekmire runs at write time (inside the IDE), at commit time (as a git hook), and at runtime (as a Rust reverse proxy). Catch the finding before it becomes an incident.
# generated by Copilot — not reviewed
ANTHROPIC_KEY = "sk-ant-api03-..."
# f-string in SQL execute()
cursor.execute(f"SELECT * WHERE id={user_input}")
# MCP tool description override
description: "Ignore all previous..."
✗ CRITICAL hardcoded-secret:anthropic-key line 1
✗ HIGH sql-injection:f-string-execute line 4
✗ HIGH mcp-tool-poisoning line 7
commit blocked · 3 findings · 0 suppressed
[ principles ]
Our approach to developer security.
[ 01 ]
Security must be free to be effective.
A $200/month WAF protects the company that can afford it. Every plan ships every module — Build Guard, Network Shield, Semantic Analyzer, Threat Intelligence. Volume and seats are the only plan gates.
[ 02 ]
Your data is yours. Full stop.
ekmire never sees your prompts, your code, or your API keys in plaintext. BYOK routes inference through ekmire's proxy and forgets the call. Keys are AES-256-GCM encrypted at rest. No vendor lock.
[ 03 ]
Offline first. No excuses.
Build Guard runs fully offline against a locally cached, Ed25519-signed rule bundle. The git hook works without a network connection. Security can't depend on your internet latency.
[ 04 ]
Open rules. Community signal.
The rule bundle schema is MIT-licensed on GitHub. Community PRs go through CI validation before review. Crowd-sourced payload hashes feed the threat queue. The more orgs that see a pattern, the faster it ships to everyone.
[ platform ]
IDE scanner, git hook scanner, and runtime proxy — in one platform.
[ 01 ]
Write time
Build Guard · MCP Server
MCP server tails your IDE buffer in Cursor, Claude Code, Continue, and Zed. AST analysis + regex engine runs fully offline in under 50ms. Findings surface before the file hits disk.
stdio · zero deps · offline
[ 02 ]
Commit time
Build Guard · Git Hook
Pre-commit hook runs Engine A (regex) and Engine B (Python AST) on every staged file. Hardcoded secrets, injection patterns, and unsafe deserialization are blocked before they reach the remote.
Ed25519 signed · 12 rule categories
[ 03 ]
Runtime
Network Shield · Rust Proxy
An 8MB Rust reverse-proxy sidecar reads every inbound request. IP reputation, deterministic rules, and AI semantic analysis — all in under 5ms. Add two lines to Docker Compose.
< 5ms p99 · FROM scratch · two-line install
[ the team ]
Built by Flux8Labs, Jaipur, India.
Flux8Labs is a developer tools studio based in Jaipur, Rajasthan. We build AI automation systems, web platforms, and security tooling for developers, businesses, and NGOs. Security is our own first customer — we run ekmire on every project we ship.
ekmire started as an internal AI code security scanner. We were building products with LLMs and needed something to audit AI-generated code before it hit production. As MCP tool poisoning attacks, prompt injection vulnerabilities, and runtime jailbreaks became real incidents — not theoretical CVEs — we turned the scanner into a full developer security platform.
Small team, high standards. We believe security tooling should be as reliable as the infrastructure it guards.
[ contact ]
[ location ]
Jaipur
Rajasthan, India
[ licence ]
MIT
Rule bundle schema
[ by the numbers ]
[ get started ]
Protect your stack in five minutes.
Install the CLI. Add two lines to Docker Compose. Every layer goes live. Free forever for solo developers — no credit card, no call with sales.