Sign in

Products

Audit. One is free.

A security read of an AI-built web app, with a price on it. The passive scan runs in the page and costs nothing; the two reads are done by a person, with your permission, and come back as a link.

  1. Passive scan

    What a browser can see, in thirty seconds.

    Freeno account, no email

    • Headers, cookies, source maps and exposed keys on any URL you own
    • Public keys told apart from secret ones, so nothing cries wolf
    • A design read of up to three screenshots, one finding in full

    Cannot see your database rules, your server, or whether one user can reach another's rows.

    Run a scan

  2. Repository read

    most bought

    The half a scan cannot see.

    $499one repository, one report

    • Read-only access through a GitHub collaborator invite; nothing is stored
    • Credentials in the tree and in the history, row level security on every table, known advisories, the build flags
    • Four reads by Claude, one question each, then three sentences on the whole thing
    • A report at a private link, with a path, a line and a fix for every finding

    A read, not a rewrite. You get the list and the reasons; the fixes are yours to make.

    Within three working days

  3. Full review

    The read, then the fixes, then a call.

    $1,499one repository, fixes included

    • Everything in the repository read
    • The critical and warning findings fixed in a pull request against your repository
    • A second read after the merge to confirm each one is closed
    • A sixty-minute call to walk through what was found and what to watch

    Fixes cover what the read found. New features and redesigns are separate work.

    Within ten working days

Card payment through Stripe. Nothing is read until you have added the audit account to the repository yourself.