Question 1

What security vulnerabilities does Getdiffense detect?

Accepted Answer

Getdiffense detects IDOR (Insecure Direct Object Reference), broken access control, missing authentication guards, sensitive data exposure, JWT misuse, SQL injection, and more across every pull request.

Question 2

How does Getdiffense integrate with GitHub?

Accepted Answer

Getdiffense installs as a GitHub App. You select which repositories to monitor, and reviews trigger automatically on every pull request open, update, or synchronize event. No code changes required.

Question 3

What programming languages does Getdiffense support?

Accepted Answer

Getdiffense currently specialises in TypeScript and JavaScript backends, with deep support for Node.js APIs, Prisma ORM, and Express.js patterns.

Question 4

How is Getdiffense different from SonarQube or Snyk?

Accepted Answer

Getdiffense uses large language models with specialised security prompts to understand code semantics, not just pattern matching. It catches contextual vulnerabilities like IDOR and broken object-level auth that rule-based tools miss. It also understands your specific ORM patterns — like Prisma's findMany without take — not just generic anti-patterns.