| What it does | Evidence laid out, not a lone percentage.
| Security checks for AI-built apps before launch
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | Not given
| GB
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Free plan: 4 welcome credits (1 full report). Pro: $19/month for 300 credits/month. Team: $59/month for 1500 credits/month. Each report costs 4 credits.
| Free: All checks, terminal and JSON output, exit codes for CI. Pro: £99/year or £12/month, includes HTML reports, scan history, comparison features, priority support, 2 machines. Agency: £349/year, includes white-label reports, scan multiple projects in one report, 10 machines.
|
|---|
| Key features | - Cross-checks four independent detection models
- Deterministic evidence trump card (C2PA credentials, generator self-tags)
- Published weighted-vote rule (30% each for Sightengine, Winston AI, Was It AI; 10% for SAFE)
- Batch screening of up to 50 images at once
- Graded conclusions with disagreement reported
- Shareable report links and forensic PDF download
- Support for JPEG, PNG, WebP up to 12MB
- Generator-specific classification (Midjourney, DALL-E, Stable Diffusion, Flux, Imagen, Adobe Firefly, Ideogram)
- SHA-256 file hash recording for chain-of-custody
- Private uploads, shared only via report link
| - Detects leaked secrets including API keys, passwords, and LLM keys in browser code
- Checks database and storage security including row-level security policies and open Firestore rules
- Identifies API route and payment vulnerabilities including missing auth checks and unverified webhooks
- Detects AI and agent security issues including system prompt injection and unsafe model output rendering
- Scans dependencies for known vulnerabilities using OSV database
- Runs entirely locally with code never leaving your machine
- Works offline and integrates with CI pipelines using environment variables
- Provides fix suggestions and AI-ready prompts for each finding
- Supports multiple frameworks including Next.js, React, Vue, Svelte and platforms like Supabase, Firebase, Stripe
- Generates shareable HTML reports and tracks scan history with Pro plan
|
|---|
| What makes it different | - Published weighted-vote rule with every vote shown by name instead of hidden percentages
- Reports disagreement honestly instead of blending signals into one number
- Automatic credit refund when an engine fails
- Full product access in free tier (not a limited teaser)
- Deterministic file evidence (C2PA, metadata) that outranks model votes
| - Designed specifically for security gaps that AI coding tools create
- Code never leaves your machine, with zero uploads required
- Low false alarms through context-aware checking of actual code behavior
- Free tier includes all core checks with no limitations
- Source-available license with code readable on GitHub
|
| Community votes | 0 | 0 |
| DR (Domain Rating by Ahrefs) | 41 ▲ +1 (up) since last check | Not checked yet ● no change since last check |
| Trust Flow (Majestic) | 13 | 0 |
| Citation Flow (Majestic) | 27 | 0 |
| Referring domains (Majestic) | 102 | 0 |