momosecurity/momo-code-sec-inspector-java

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1048 stars · 154 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

An IntelliJ IDEA plugin by Momo Security that performs static security analysis of Java code in real time using IDEA's native Inspection mechanism. It detects vulnerabilities like SQL injection, deserialization risks, and XXE, and offers one-click fixes for many rules.

Use cases

• find sql injection vulnerabilities in java code
• detect deserialization risks in java project
• fix xxe vulnerabilities automatically in idea
• scan java code for hardcoded credentials
• static security audit of java project in ide
• detect mybatis xml mapper sql injection

When to choose

• you develop Java in IntelliJ IDEA and want real-time security feedback while coding
• you want lightweight SAST integrated into the IDE with one-click remediation
• you need coverage for common Java vulnerabilities like SQLi, XXE, and deserialization

When to avoid

• you need CI/CD pipeline security scanning rather than IDE-based analysis
• your project is not Java or you use a different IDE
• you need actively updated rules - the latest release dates to 2022

Facets

plugin · maturity maintenance

security vulnerability-scanning linter code-review security developer-tools testing editor-plugin jvm sast intellij-idea static-analysis one-click-fix java-security jetbrains-plugin

Member repositories

For agents

markdown · JSON · MCP: product_card(name="momosecurity/momo-code-sec-inspector-java")