// repository security auditor

Audit every line.
See every weakness.

Static analysis, secret detection, library vulnerability intelligence and optional compliance evidence — rendered as a living neural map of your repository.

-detection rules

12+ecosystems

-compliance frameworks

0bytes of code sent

01

Select target

02

Choose branch

Select a target and discover its branches.

03

Engagement options

Online vulnerability intelligenceOSV.dev + deps.dev. Only library names & versions leave this machine. Compliance audit (optional)Map evidence to OWASP, PCI DSS, ISO 27001, SOC 2, GDPR, HIPAA, NIST SSDF. Include test filesFindings in tests are flagged and weigh 50% in the score. Trust the repository's own configurationApply its .securerepo.toml, shared triage and nosec comments. Off for remote repositories and other branches; the report always lists what they changed. Learn from triageApply your false-positive decisions, learned patterns and rule statistics.

Minimum confidence

Analysis engine

Max file size

Auditor (audit trail)

// live operation

Scanning

00:00elapsed

0files

0findings

0%progress

Attack surface pipeline

Live structure map

root@secure-repo:~# tail -f activity.log

0SECURITY SCORE

-

// mission report

repository

click a node for the explanation · scroll to zoom · drag to pan · double-click to fit

Hide test code Data flow only Show suppressed 0

Vulnerable / risky only Direct only

Audit every line.See every weakness.