Hermes Agent can now review your codebase for security bugs with the new official Security plugin by @mark_s.
Hermes first maps what an attacker could reach and which inputs it trusts. It splits the code across parallel subagents, checks every candidate finding against the code, and traces whether an attacker can actually exploit it.
Turn on test confirmation and Hermes writes a small reproduction for each finding and runs it in a temporary copy of the repo. Each report records the evidence and the findings Hermes ruled out, and exports to SARIF for your existing tools.
Run it from chat, the CLI, or the Security page in Hermes Desktop.