| What it does | Independent auditing for AI agents
| Security checks for AI-built apps before launch
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | US
| GB
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Startup: 2 audits/reports per month, up to 3 agents. Growth: 4 audits/reports per month, up to 3 agents. Enterprise: 8 audits/reports per month, up to 3 agents. Agentic Enterprise: custom quote, 4+ agents. Free open-source: 60 inspections, self-hosted.
| Free: All checks, terminal and JSON output, exit codes for CI. Pro: £99/year or £12/month, includes HTML reports, scan history, comparison features, priority support, 2 machines. Agency: £349/year, includes white-label reports, scan multiple projects in one report, 10 machines.
|
|---|
| Key features | - Multidimensional audit covering AI red teaming, operational assurance, philosophical, ethical and sociological dimensions
- Tests for prompt injection, policy violation, tool invocation governance, and authorization
- Assesses epistemic integrity, reality grounding, and frankness
- Evaluates fairness governance and vulnerable user care
- Analyzes stakeholder conflict, influence and systemic risk
- Connect through GitHub or MCP with no manual setup required
- Generates audit reports with evidence and proof of agent behavior
- Open-source engine available for self-hosting
- Detects information hiding, unauthorized decision override, and unauthorized actions
| - Detects leaked secrets including API keys, passwords, and LLM keys in browser code
- Checks database and storage security including row-level security policies and open Firestore rules
- Identifies API route and payment vulnerabilities including missing auth checks and unverified webhooks
- Detects AI and agent security issues including system prompt injection and unsafe model output rendering
- Scans dependencies for known vulnerabilities using OSV database
- Runs entirely locally with code never leaving your machine
- Works offline and integrates with CI pipelines using environment variables
- Provides fix suggestions and AI-ready prompts for each finding
- Supports multiple frameworks including Next.js, React, Vue, Svelte and platforms like Supabase, Firebase, Stripe
- Generates shareable HTML reports and tracks scan history with Pro plan
|
|---|
| What makes it different | - Truly independent auditing through outside panel judgment, never internal self-inspection
- Off-the-shelf integration with no manual eval harness or SDK embedding required
- Covers five dimensions of trust: purpose, authority, workflows, responsibility and evidence
- Measures beyond performance to identify misalignment across red teaming, operational, philosophical, ethical and sociological categories
| - Designed specifically for security gaps that AI coding tools create
- Code never leaves your machine, with zero uploads required
- Low false alarms through context-aware checking of actual code behavior
- Free tier includes all core checks with no limitations
- Source-available license with code readable on GitHub
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 15 ▼ −1 (down) since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 11 | 0 |
|---|
| Citation Flow (Majestic) | 31 | 0 |
|---|
| Referring domains (Majestic) | 156 | 0 |
|---|
iFixAi
Seaworthy