Download SecureSense for VS Code
One file. Install it in VS Code, and the Getting Started tour sets up everything else — the agent, Semgrep and CodeQL.
Or search "SecureSense" in VS Code's Extensions view: it's on the VS Code Marketplace, and on Open VSX for Cursor, Windsurf and VSCodium. Installed from there, it updates automatically.
Install in four steps
- 1Install Python 3.11 or newer
From python.org — on Windows you can also run
winget install Python.Python.3.12. SecureSense installs everything else for you. - 2Install the extension
In VS Code open the Extensions view (
Ctrl+Shift+X), click ··· at the top, choose Install from VSIX… and pick the file you downloaded. Or in a terminal:code --install-extension securesense.vsix - 3Follow the tour
The Get started with SecureSense tour opens. Click Check Setup, then Install Missing Tools — it installs the agent's Python packages, Semgrep and (optionally) CodeQL, after showing you exactly what it will download.
- 4Scan
Open a Python project and click Scan Workspace on the SecureSense panel (the shield in the Activity Bar). Verdicts appear as each finding is triaged.
Verify the download
The file's SHA-256 checksum should be:
a9c928d6e424d4163617e6c5343e269858489954ae8d360978c07df981663d6a
Get-FileHash securesense.vsix -Algorithm SHA256
shasum -a 256 securesense.vsix
Requirements
- VS Code 1.90.0 or newer, on Windows, macOS or Linux
- Python 3.11+
- Semgrep and/or CodeQL — installed for you by Install Missing Tools
- Python projects (Flask, Django, FastAPI or plain Python) get the full analysis