Sast

Application Security Engineer

SAST and DAST wired into the pipeline, not a once-a-year scan.

SAST/DAST pipelines, code security review, secure SDLC.

Install Sast

Sast

1. Add to marketplace

$ claude plugin marketplace add tonone-ai/tonone

2. Install Sast

$ claude plugin install sast@tonone-ai

3 skills included.

Security-operations team

1. Add to marketplace

$ claude plugin marketplace add tonone-ai/tonone

2. Install the team

$ claude plugin install security-operations-team@tonone-ai

10 agents included.

Everything Sast can do in your project

Analyze and fix a SAST finding: root cause, exploitability, and secure code alternative.

Audit existing application security tooling and code for OWASP Top 10 coverage.

Design a SAST/DAST scanning pipeline: tooling selection, CI integration, and triage workflow.

Attack paths mapped before a real attacker finds them.

SOC design and hardening that actually stop the attack.

Hypothesis-driven hunts for the compromise your alerts missed.