Inspiration

I wanted to build a tool that helps developers fix business logic security holes before their apps launch, as traditional tools often miss these critical issues.

What it does

Hunter is a security scanning platform that detects dangerous logic flaws in code repositories, provides verifiable results, and offers an easy-to-use dashboard for management.

How we built it

I used a full-stack tech stack: FastAPI for the backend, Streamlit for the UI, Celery for async tasks, and integrated Tree-sitter for code analysis. I also set up Docker for deployment and comprehensive tests.

# Core Code Example
from fastapi import FastAPI
app = FastAPI()

@app.get("/scan")
def start_scan():
    return {"status": "scanning"}

Challenges we ran into

The main challenges were building a reliable async task system for large scans, stabilizing our end-to-end tests in CI, and creating accurate logic detection rules within a short time frame.

Accomplishments that we're proud of

I delivered a fully functional tool on time that can detect real vulnerabilities. I am also proud of our clean CI/CD pipeline and the strong test coverage I achieved.

What we learned

I deepened our skills in full-stack development, async architecture, and security tooling. Most importantly, I learned how to prioritize features and work effectively as a team under hackathon pressure.

What's next for Hunter

Next, I plan to add more programming language support, build IDE plugins for real-time scanning, and work towards a cloud-based version to make the tool even more accessible.

Built With

Share this project:

Updates