CodeGuard AI — AI Compliance & Code Intelligence System

https://code-guard.eu

AI system for auditing, validating, and governing AI-generated code in production environments.

🚨 Problem

AI is writing more code than ever.

But:

• Generated code introduces hidden security risks

• Compliance (GDPR, AI Act) is often ignored

• Teams lack visibility and control

• Errors scale faster than traditional review processes

💡 Solution: Triple-Channel Protection

CodeGuard AI analyzes and validates code using a unified architecture that works everywhere:

1. 💻 IDE Extension: Real-time scanning and auto-fixes directly in VS Code & Cursor.

2. 🤖 MCP Server: Give your AI agents (Claude, Cursor) the context they need to follow standards.

3. 🌐 REST API & CLI: Automate compliance in your CI/CD Pipeline (Vercel, GitHub Actions).

⚙️ Core Capabilities

• 🔍 Detect vulnerabilities and unsafe patterns

• 🛡 Validate compliance (GDPR, AI Act, security standards)

• 🧠 Audit AI-generated code before deployment

• 📊 Provide structured, actionable feedback

• 🔄 Analyze code changes using diff-based auditing

🌐 REST API

CodeGuard provides a secure REST API for integrating compliance scanning into your applications and workflows.

Quick Start

# 1. Set environment variables
export CODEGUARD_API_KEYS="your-api-key-1,your-api-key-2"
export TRANSPORT_MODE=sse

# 2. Start the API server
npm run start:mcp

# 3. Test the API
curl -X POST http://localhost:3000/api/scan \
  -H "x-api-key: your-api-key-1" \
  -H "Content-Type: application/json" \
  -d '{"region": "BR", "frameworks": ["gdpr", "lgpd"]}'

🚀 Deploy to Vercel

Deploy your CodeGuard API to production in minutes:

npm run vercel:deploy

Required Environment Variables:

• CODEGUARD_API_KEYS

• CODEGUARD_LICENSE_KEY

• OPENAI_API_KEY (Optional)

🛠 Tech Stack

• Core: TypeScript / Node.js

• Intelligence: Multi-provider LLM (GPT-4o, Claude, MiniMax 2.7)

• Protocol: Model Context Protocol (MCP)

• Platform: Vercel / Supabase

👥 Who is this for

• Engineering teams using AI-generated code

• Companies operating under GDPR / AI Act

• Platforms integrating LLM-based development workflows

🔥 Positioning

Not a linter. Not a scanner.
A system for governing AI-generated code.