I built an AI agent that watches your GitHub repo and opens PRs when it finds bugs — automatically

Security vulnerabilities sit in codebases for months. Not because developers don't care — because nobody has time to review everything. Existing tools (Dependabot, CodeQL, SonarQube) find issues. They don't fix them. The fix still requires a human. I built guardian — an AI agent that watches your repository, finds real bugs, and opens PRs with fixes. Autonomously. What it does guardian runs three scan passes on every push: Security — hardcoded secrets, SQL injection, insecure dependencies, OWASP Top 10 Performance — unbounded loops, N+1 patterns, missing error handling Logic — unreachable code, incorrect conditionals, type mismatches For each finding above a confidence threshold, guardian generates a fix and opens a PR — with explanation, evidence, and a link back to the finding. Not a linter. An autonomous developer. The difference is the PR. A linter tells you something is wrong. guardian fixes it. You still review the PR. You still merge it (or don't). But the first-draft fix is alr