Member of
Agentic pentesting.
Built for apps made with AI,
checked like an attacker would.
Apps from Lovable, Bolt, Cursor and v0, and the startups whose buyer wants a pentest report.
In scope
- Next.js apps
- Supabase backends
- Apps built with AI tools
A repository in,
proofs and fixes out.
- Grade a public repository, free.
- Find what is wrong, with the evidence.
- Fix it with a pull request or a prompt to paste.
- Retest automatically, to confirm the fix.
- Share a signed report anyone can verify.
Starts where you code,
lands where you work.
- In from GitHub, GitLab or Bitbucket.
- Out to Slack, Linear, Jira or PagerDuty.
- Back as a fix, in a pull or merge request.
- GitHub
- GitLab
- Bitbucket
- Slack
- Linear
- Jira
- PagerDuty
A proof you can replay,
a fix you can merge.
Each finding arrives with its evidence and its fix, and a retest confirms it, not a line in a scanner’s list.