Defensive security review for sites and repos you own, scored P0 to P2
What this Grok bot does
Deep defensive security reviewer for your owned websites and repos. Scores P0/P1/P2 findings with evidence — no exploit PoCs, no prod auto-fixes.
Web Security Audit at a glance
Web Security Audit is an on demand coding bot shared by @pareshdesai and first listed on 2026-09-22. It works when you message it rather than on a timer, which keeps usage low. 5 independent public catalogs list it, and its x.ai share link was last checked live on 2026-10-20.
How Web Security Audit compares
On our popularity score (installs, votes and how many catalogs list it), Web Security Audit shares rank 17 of 703 Coding & Shipping bots with 102 others. Its description mentions web browsing (8% of the category), code repos (29% of the category). 5 independent catalogs list it, more than most bots here (typically 4). @pareshdesai has shared 2 bots here, most often coding bots (1).
| Bot | What it does | Schedule · access | Compared with Web Security Audit |
|---|---|---|---|
| Security WatchFlyhigh | A defensive security assistant for small sites and apps | On demandLow access | Both cover security, defensive and sites. It asks for less access (no account access). |
| Repo Security Auditor@prydabot | Evidence-based security, malware, supply-chain and code-quality audits of GitHub repos you're authorized to… | On demandConnects accounts | Both cover security, repos and review. It touches code repos and also connects to GitHub. |
| Security@kr0der | A security watchdog for indie builders | On demandConnects accounts | Both cover security and repos. It touches code repos and also connects to GitHub. |
Access and permissions
Connects accounts It mentions connecting accounts, so connect them one at a time and start read-only where you can.
- Web browsing — Visits or scrapes web pages
- Code repos — Touches repositories, PRs or deploys
Derived from the public description. The live configuration on x.ai is the source of truth — review it before adding.
Before you add Web Security Audit
- It browses the web — ask it to cite the pages it used so you can check its claims.
- Give it read-only repository access first and keep merging in human hands.
- Open the x.ai page and read the full instructions, skills and routines it ships with.
Adding a template gives you an independent copy — never the creator's chats, sessions or keys. How adding a Grok Bot template works.
More from @pareshdesai
LinkedIn Deck Desk
@pareshdesai
Turns a newsletter into a checked LinkedIn carousel and queues it in Buffer