aedsc — Solidity security scanner for the terminal

Run Slither on your contract, get a ranked HIGH / MED / LOW / INFO report in the terminal, ship the obvious bug before mainnet ships it for you.

Free CLI. Web flow at https://aedsc.xyz. MIT.

npx aedsc Vault.sol

  ● AEDSC  ·  solidity security scanner
  ──────────────────────────────────────────────
  ✔ scan complete  ·  2.1s  ·  slither + aderyn

  3 findings  ·  HIGH 1  MED 0  LOW 0  INFO 2

   HIGH   reentrancy-eth     Vault.sol:6–12   (medium conf · slither)
          External call before state update — attacker can drain.

   INFO   solc-version       Vault.sol:2      (high conf · slither)
   INFO   low-level-calls    Vault.sol:6–12   (high conf · slither)

  → fix this one first: aedsc upload Vault.sol --email [email protected]
    (sends you a PDF report + suggested diff within 24h, free)

Why

• Slither output is noisy. aedsc dedups, ranks by severity × confidence, prints what matters first.
• forge test doesn't catch reentrancy. Static analysis does.
• Audits cost $30k. A pre-audit scan catches the obvious ~80% before you pay anyone.
• Web flow when you want it. aedsc upload ships the same contract to https://scan.aedsc.xyz, merged with Aderyn, emailed back as a clean report.

Install

Requires Node ≥18 and Python ≥3.10 with Slither on $PATH.

# CLI
npm install -g aedsc
# or zero-install
npx aedsc <file>.sol

# engine (one time)
pip install slither-analyzer

Verify your toolchain:

aedsc init

Commands

aedsc scan <path> — local Slither, formatted

aedsc scan Vault.sol            # single file
aedsc scan .                    # whole Foundry / Hardhat project
aedsc scan Vault.sol --json     # raw JSON to stdout (pipe-friendly)
aedsc scan Vault.sol --silent   # no banner / footer (CI mode)

Exit code is always 0. Gate CI on the JSON yourself, or use aedsc upload (which can fail the build on HIGH).

aedsc upload <path> --email <you> — full async report

POSTs your contract to https://scan.aedsc.xyz/v1/scan. Backend runs Slither + Aderyn (and Mythril on the paid tier), merges the findings, emails you a plain-English report with severity rationale and a suggested diff where mechanical.

aedsc upload Vault.sol --email [email protected]
aedsc upload Vault.sol --email [email protected] --public

--public opens an anonymized report at aedsc.xyz/scans/<id>/ — useful for blog posts, PR reviews, share links.

aedsc init — first-time setup

Verifies Slither is installed, drops a sample .aedsc.yml, optionally writes a GitHub Action that runs aedsc scan . on every PR.

CI in 7 lines — official GitHub Action

.github/workflows/aedsc.yml:

on: [pull_request]
permissions: { contents: read, pull-requests: write }
jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: Pazificateur69/aedsc-action@v1

That's the whole thing. On every PR you get a sticky comment with ranked findings; on subsequent pushes the same comment is updated in place. Optional inputs: fail-on: high|medium|low|never, solc-version, upload-email (for the full hosted scan). Marketplace listing: https://github.com/marketplace/actions/aedsc-solidity-security-scan.

Or wire it manually if you want full control

- uses: actions/setup-python@v5
- run: pip install slither-analyzer
- run: npx aedsc scan . --silent --json > slither-report.json
- run: |
    HIGH=$(jq '[.findings[] | select(.severity=="high")] | length' slither-report.json)
    if [ "$HIGH" -gt 0 ]; then echo "::error::$HIGH HIGH findings"; exit 1; fi

Demo report

Try the live flow without installing anything: https://aedsc.xyz/scan/ — paste a contract, see findings in 2 seconds.

Pricing of the hosted side

| | Free | Founder Pro · €29/mo | |---|---|---| | Local aedsc scan | ✓ | ✓ | | Official GitHub Action | ✓ | ✓ | | Hosted aedsc upload | 3/h/email | unlimited, priority queue | | Manual triage by Alessandro | — | every report | | Plain-English explanation | — | ✓ | | Suggested fix diffs | — | ✓ | | Mythril enabled | — | ✓ (when infra permits) | | PDF report by email | — | ✓ | | Founding rate locked for life | — | ✓ |

Subscribe — €29/mo →

Project

• Site: https://aedsc.xyz
• Backend API: https://scan.aedsc.xyz · OpenAPI
• CLI source: https://github.com/Pazificateur69/aedsc-cli
• GitHub Action: https://github.com/Pazificateur69/aedsc-action
• Issues: https://github.com/Pazificateur69/aedsc-cli/issues
• [email protected] — a real human answers within a day

License

MIT.