Quantum Viper CLI

Professional command-line security scanner — by Quantum Tiger

Installation

npm install -g @quantumtiger/quantumviper

Quick Start

# Scan current directory
quantum-viper scan .

# Scan with specific language
quantum-viper scan --language python ./src

# AI-powered code analysis
quantum-viper analyze code ./src

# Hybrid analysis (static + dynamic + AI)
quantum-viper analyze hybrid ./src

# Generate report
quantum-viper report --format html --output report.html

Commands

| Command | Description | |---------|-------------| | scan | Run static analysis scan | | analyze code | AI-powered code security review | | analyze hybrid | Combined static + dynamic + AI analysis | | fix | Interactive AI-powered fix suggestions | | report | Generate security reports (HTML, SARIF, JSON, MD) | | security sca | Software Composition Analysis | | security secrets | Secrets & credential detection | | security iac | Infrastructure as Code scanning | | security sbom | Generate Software Bill of Materials | | security license | License compliance check | | explain | AI explanation of any vulnerability type | | agent chat | Interactive AI security chat | | agent explain | AI explanation of code | | agent fix | AI-powered code fixes | | dashboard sync | Sync results to cloud dashboard | | mcp | Start MCP server for AI assistants |

AI Engine

The CLI uses a three-tier AI priority chain:

BYOAI (Your Provider) → Viper Cortex Engine → Cortex Engine (Local)

BYOAI Configuration

quantum-viper config set ai.endpoint "https://api.openai.com/v1"
quantum-viper config set ai.apiKey "sk-..."
quantum-viper config set ai.model "gpt-4"

Configuration

# Initialize config
quantum-viper init

# Set options
quantum-viper config set severity medium
quantum-viper config set autofix true

Baseline Suppression

# Create baseline from current scan
quantum-viper scan . --create-baseline

# Scan ignoring baseline findings
quantum-viper scan . --baseline .quantumviper-baseline.json

Output Formats

• Terminal — Colored, interactive output (default)
• HTML — Rich visual report
• SARIF — Standard for CI/CD integration
• JSON — Machine-readable
• Markdown — Documentation-friendly

Languages Supported

JavaScript, TypeScript, Python, PHP, Java, C/C++, Go, Ruby, SQL, Rust, Swift, Kotlin, and more.

Links

• Changelog
• Examples
• Website
• GitHub

License

Proprietary — © 2025-2026 Quantum Tiger. All rights reserved.