| What it does | Open source code review inside your coding agent before you push
| AI penetration testing that proves every vulnerability with independent verification
|
|---|
| Stage | Startup
| Not given
|
|---|
| Founded | 2024
| Not given
|
|---|
| Based in | US
| Not given
|
|---|
| Pricing model | Open source
| Paid
|
|---|
| Pricing | Free. Open source under Apache 2.0 license.
| One-off Deep test: €3,500 one-time (includes fix retest). Standard: €990/month (4 scans per month). Deep: €2,900/month. Stress add-on: €900/month. Annual billing includes two months free.
|
|---|
| Key features | - 22 built-in scanners for secrets, security, dependencies and lint errors
- Code graph showing callers and importers of changed code
- Separate reviewer process using Claude Code or Codex
- Script-based validation of review completeness
- Works with Claude Code, Cursor, Codex and Cline
- Terminal, agent and CI integration
- GitHub Action for pull request reviews
- Pre-commit and pre-push hooks
- Custom scanner configuration from GitHub
- No telemetry or data collection
| - Identity replay matrix for testing authorization across multiple roles and tenants
- Business logic invariant testing for coupon reuse and price tampering
- Prompt injection and AI agent security testing including MCP servers
- Independent verification with 3x reproduction requirement from clean sessions
- 35 vulnerability classes tested deterministically
- Scope and rules of engagement enforced in code before requests execute
- Trust page for sharing security posture with customers and auditors
- Mapping of findings to security compliance frameworks
- Authorized stress testing with rate-limit discovery and circuit-breaker controls
|
|---|
| What makes it different | - No API key, account or server required - runs entirely on your local machine
- Separate reviewer process with no memory of the coding session that produced the code
- Open source Apache 2.0 license with full transparency
- Integrated directly into coding agents without additional configuration
- Findings only on changed lines, not whole repository
| - Reports only verified findings that are reproduced independently from clean sessions
- Detects cross-tenant authorization flaws through identity replay that scanners miss
- Identifies business logic flaws that signature-based scanners cannot catch
- No-finding-no-fee guarantee on first deep test
- Tests AI agents and prompt injection with canary verification
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 41 ● no change since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 17 | 2 |
|---|
| Citation Flow (Majestic) | 22 | 1 |
|---|
| Referring domains (Majestic) | 316 | 2 |
|---|
SuperPentest