Turn a first look at your code into useful findings.
Review a repository with bounded static checks. Findings identify the affected files, supporting evidence, and suggested remediation.
- Static code and configuration patterns
- Potential exposed-secret patterns
- Dependency and security indicators when supported
- File-level evidence and remediation
Scan a connected private GitHub repository
Connect one repository with a fine-grained GitHub token. Static analysis starts after a verified purchase, within 2,000 files and 20 MB per run. Customer code is not executed.
Have a private repository? Upload a ZIP for a paid review.
Private source review
Upload a ZIP archive up to 4 MB with one root folder, up to 2,000 files and 20 MB of expanded contents. Static analysis starts after payment is verified. The archive is encrypted for temporary storage and retained for up to 24 hours. Install scripts and customer code are not executed.
A report with clear boundaries.
Each report lists the checks performed, the resources reached, and any checks skipped. Findings include observed or heuristic confidence so you can judge the evidence.
- Use a public GitHub URL for the preview. Private repositories require sign-in and a selected repository connection or ZIP upload for paid analysis. Never paste access tokens into the URL.
- Customer code and install scripts are never executed.
- Heuristic matches require review; language and scanner coverage are reported for each run.
Account and target verification are required for subscriptions. Payment and report access are confirmed by the server.
One-time purchases cover one paid run and do not renew. Monthly plans renew automatically and include four paid runs per billing period for one verified target. Unused runs do not roll over. Cancel through the billing portal before your next renewal; access continues until the current paid period ends. Prices in USD. You’ll see the total before payment. Terms of use · Privacy policy.
Before you start
What does the free preview include?
Up to 100 files / 1 MB. The preview shows up to five findings with the scope and limitations of the scan. Zero findings means no issues were detected by those checks, not a guarantee that none exist.
What does a paid run include?
Up to 2,000 files / 20 MB per run. A confirmed purchase unlocks the paid allowance and full available findings, plus HTML and PDF exports. Reports remain private to the owning session or account.
Can I check a private target?
Use a selected GitHub repository connection or the signed-in ZIP upload workflow above for a private repository. Its paid analysis begins only after checkout is verified. Never include repository tokens in the URL.
