Install

Fix security bugs. Earn XP.

SecureQuest is a VS Code extension that flags risky JavaScript and TypeScript as you work, then rewards every real fix.

Install free See pricing
Pixel-art knight giving a thumbs up and holding a shield with a green check mark

What it does

  1. 1 Spot it

    Risky code gets a warning right in your editor, such as a hardcoded secret, a weak hash, or an unsafe HTML sink.

  2. 2 Fix it

    Change the code and save. Fixes are checked by scanning the file again, so hiding a warning doesn't count.

  3. 3 Level up

    Earn XP, finish daily quests, and collect badges as your code gets safer.

login.js
- crypto.createHash('md5')
+ crypto.createHash('sha256')

+10 XP Fixed: Weak hash

Screenshots

Captured from the extension running in VS Code. These show the Pro tier.

VS Code showing warnings on a hardcoded key, a SQL query, and a weak hash, with a quick-fix menu offering Explain with AI and Suggest secure rewrite with AI
Findings appear inline, with AI help one click away.
Pixel-art popup reading plus 10 XP, Fixed: Weak hash, shown beside the corrected code
Save a fix and collect the reward.
SecureQuest sidebar showing level, XP bar, badges, and a list of challenge missions with one marked done
Track your level, badges, and missions.

Pricing

Free

$0

Learn the basics and build the habit.

  • 5 security rules: secrets, unsafe regex, weak hashes, eval, XSS
  • Up to 5 new suggestions a day, and the file tells you when more were found
  • XP and levels
  • Daily quests
  • Pixel UI
  • Basic badges
Install free

Pro

$4.33/mo

Start with SecureQuest Pro from CA$4.33 a month. Everything in Free, with no daily limit, plus:

  • OWASP Top 10:2025 checks1
  • AI explanation of findings2
  • Secure code rewrite suggestions2
  • 13 challenge missions
  • One-click fixes, theme packs, custom quests, workspace reports, and team rules
Get Pro
  1. Pattern based checks for common risky code in all 10 categories. They don't prove an app is free of a category's weaknesses.
  2. Needs GitHub Copilot or another VS Code language model provider. Flagged code and nearby lines go to that provider only when you ask, with values that look like secrets removed first on a best effort basis.

By installing or buying SecureQuest you agree to the Terms of Service. See the Privacy Policy for how your data is handled.

Testimonials

No reviews yet. These are placeholders, not real customers.

Placeholder
Your review about catching a hardcoded secret could go here.
Name, role
Placeholder
Your review about daily quests and XP could go here.
Name, role
Placeholder
Your review about challenge missions could go here.
Name, role

Install

Download the extension, then install it from your terminal. Needs VS Code 1.137 or newer.

Download for VS Code
code --install-extension securequest.vsix

Run this from the folder you downloaded it to. The free tier needs no account or license key.

Pixel-art treasure chest overflowing with gold coins