ProSec

ProSec is a cybersecurity tool designed to enhance the security alignment of code generation models by systematically synthesizing potentially vulnerable and benign code instances. Its primary use case involves generating and evaluating code across common vulnerability exposures (CWEs), employing a structured pipeline that includes vulnerability detection and automatic fix generation using the Purple Llama tool. Notable features include the ability to synthesize CWE-inducing instructions, generate both vulnerable and benign code, and create a comprehensive training dataset for improving code synthesis models.