Inspiration
I wanted to build a tool that helps developers fix business logic security holes before their apps launch, as traditional tools often miss these critical issues.
What it does
Hunter is a security scanning platform that detects dangerous logic flaws in code repositories, provides verifiable results, and offers an easy-to-use dashboard for management.
How we built it
I used a full-stack tech stack: FastAPI for the backend, Streamlit for the UI, Celery for async tasks, and integrated Tree-sitter for code analysis. I also set up Docker for deployment and comprehensive tests.
# Core Code Example
from fastapi import FastAPI
app = FastAPI()
@app.get("/scan")
def start_scan():
return {"status": "scanning"}
Challenges we ran into
The main challenges were building a reliable async task system for large scans, stabilizing our end-to-end tests in CI, and creating accurate logic detection rules within a short time frame.
Accomplishments that we're proud of
I delivered a fully functional tool on time that can detect real vulnerabilities. I am also proud of our clean CI/CD pipeline and the strong test coverage I achieved.
What we learned
I deepened our skills in full-stack development, async architecture, and security tooling. Most importantly, I learned how to prioritize features and work effectively as a team under hackathon pressure.
What's next for Hunter
Next, I plan to add more programming language support, build IDE plugins for real-time scanning, and work towards a cloud-based version to make the tool even more accessible.
Built With
- fastapi
- javascript
- python
- typescript
Log in or sign up for Devpost to join the conversation.