What you get: the REDTEAM prompt found your holes once. This is the free, open-source tool stack that runs the same audit on every commit, forever, with zero prompting. Ten minutes to wire up. It's the difference between checking your locks once and hiring a guard who never sleeps.
Read this first (the gap the prompt can't close)
The REDTEAM prompt is a genius one-time interrogation. You paste it, your AI walks the codebase like a hired hacker, and you get a ranked list of holes. Do it — it's step one.
But it has three blind spots, and they aren't the AI's fault, they're structural:
- It only runs when you remember to run it. Your app changes every day. The prompt doesn't re-run itself. Tomorrow's commit ships unaudited.