| What it does | Security checks for AI-built apps before launch
| Take your AI support bot from 4/10 to 10/10
|
|---|
| Stage | Not given
| MVP
|
|---|
| Founded | Not given
| 2026
|
|---|
| Based in | GB
| Not given
|
|---|
| Pricing model | Freemium
| Free trial
|
|---|
| Pricing | Free: All checks, terminal and JSON output, exit codes for CI. Pro: £99/year or £12/month, includes HTML reports, scan history, comparison features, priority support, 2 machines. Agency: £349/year, includes white-label reports, scan multiple projects in one report, 10 machines.
| Free during beta. After beta: $29/month (your own AI keys, unlimited runs) or $59/month (AI included, 50 runs/month).
|
|---|
| Key features | - Detects leaked secrets including API keys, passwords, and LLM keys in browser code
- Checks database and storage security including row-level security policies and open Firestore rules
- Identifies API route and payment vulnerabilities including missing auth checks and unverified webhooks
- Detects AI and agent security issues including system prompt injection and unsafe model output rendering
- Scans dependencies for known vulnerabilities using OSV database
- Runs entirely locally with code never leaving your machine
- Works offline and integrates with CI pipelines using environment variables
- Provides fix suggestions and AI-ready prompts for each finding
- Supports multiple frameworks including Next.js, React, Vue, Svelte and platforms like Supabase, Firebase, Stripe
- Generates shareable HTML reports and tracks scan history with Pro plan
| - Bot Score: rates bot performance across five dimensions (rules, facts, solutions, tone, trick resistance)
- Break my bot: 15 adversarial customer scenarios test for vulnerabilities
- Fix it for me: automatically rewrites rule sheet and tests against saved situations
- Train my bot: 30-minute automated training on weak spots with test validation
- GitHub integration: sends improvements as pull requests for engineer approval
- Real chat analysis: identifies problems in actual customer conversations with privacy masking
- Knowledge check: validates bot replies against FAQ and policy documents
- AI comparison: test bot performance across Claude, ChatGPT, and Gemini with costs and speed
- Open source engine: public GitHub implementation of scoring and testing algorithms
|
|---|
| What makes it different | - Designed specifically for security gaps that AI coding tools create
- Code never leaves your machine, with zero uploads required
- Low false alarms through context-aware checking of actual code behavior
- Free tier includes all core checks with no limitations
- Source-available license with code readable on GitHub
| - Nothing ships without engineer approval: all changes go through GitHub pull request review
- Privacy by default: customer data anonymized, keys encrypted, uploads not stored
- Open source testing engine: full algorithm transparency available on GitHub
- Works with your existing AI: supports Claude, ChatGPT, and Gemini with user's own keys
- Unified team experience: one plan covers support, product, and engineering roles
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | Not checked yet ● no change since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 0 | 0 |
|---|
| Citation Flow (Majestic) | 0 | 0 |
|---|
| Referring domains (Majestic) | 0 | 0 |
|---|
Seaworthy
Rulebook