SAST analysis
Static rules plus AI
The rules detect known patterns in a reproducible way. The AI explains the context, prioritizes and proposes the fix. The result is a clear finding, not a list of scattered alerts.
Static source code analysis
Code review with the rigor of an audit
Upload your code and get a report with explained findings, the affected snippet, the proposed fix and the estimated effort to apply it. Static rules and AI models work together, with the structure of a professional report.
The free account gives access to the demo reports.
ISO/IEC 25010
OWASP Top 10
CWE references
HTML and Markdown report
An analysis designed for those accountable for quality and security
For cybersecurity consultants, expert developers, development teams and those responsible for regulations and standards.
Reports
Executive summary and technical detail
Charts and indicators to decide, and the detail of each finding to fix it. Download as HTML (printable to PDF) or Markdown, organized by date and by project.
Remediation
Discovery and fix
Each finding shows the affected code, the fixed code with the differences highlighted and the estimated time to apply the change, including execution tests.
How it works
From file to report in four steps, with a clear cost before you start.
1
Upload your code
A compressed file with the source code as text, or connect your GitHub account in read-only mode.
2
Pre-check
We verify the content, compute its digital fingerprint (hash) and show you the files, lines, effort and approximate credits.
3
Confirm and analyze
You confirm your authorization over the code and the estimated credits. The analysis runs in the background.
4
Get the report
You will find it in the Reports section, ready to view, print to PDF or download as Markdown.
Before and after, in the code
Three illustrative examples of the kind of finding and fix you will see in a report.
Aligned with recognized standards
Each finding is classified into one of the ISO/IEC 25010 quality characteristics and highlighted with its own color. For Security we focus on the OWASP Top 10, with CWE references where they apply.
Security
Functional suitability
Performance efficiency
Compatibility
Usability
Reliability
Maintainability
Portability
“Aligned with” means that we use these frameworks as the basis for classification. It does not imply certification or accreditation.
What each report includes
- Executive summary with charts and indicators.
- Technical summary with the detail of each finding.
- Discovery: the actual affected code.
- Fix: the remediation code with the differences highlighted.
- Estimated effort for the developer, with execution tests.
- Points that could not be assessed and the reason why.
Your code, handled with care
The users of this platform are security professionals, and the service was designed to meet that standard.
- Text only: only code in text form is analyzed. A binary file inside a zip stops the review and you are notified; in a GitHub repository, images and other non-text files are skipped and listed.
- Digital fingerprint (SHA-256) of each package received, and the code is deleted when the analysis ends or, at the latest, after 24 hours.
- GitHub in read-only mode, with permissions that GitHub itself limits and that you can revoke whenever you want.
- Express authorization: you confirm that you own the code or have permission to analyze it.
- AI processing notice: the content is processed with third-party AI models, only with providers that do not retain the data or use it for training, and we tell you before analyzing.
Credits, with no hidden subscriptions
You create your account for free and buy the credits you need. Each analysis uses credits according to the size and complexity of the code. Analyze your code as many times as you want.
5 USD per credit
- There is a minimum number of credits to request your analysis.
- Before analyzing you see the approximate credits. If the model requires more effort, the amount may vary, and you accept that estimate.
- If they are not enough, we let you know so you can buy more. If some are left over, you keep them for other analyses.
- Payments with PayPal.
Demo reports
With your free account you can view and download three example reports with fictitious information, without buying credits.
If you need an official Mexican tax invoice (factura timbrada), the final price will change once taxes are added and the payment method will be different. To help you with the process, you can write to us in the 'Contact' section or contact your sales agent.
Need personalized attention?
If you need a tailored solution, a deeper analysis of your company’s code or an answer to a question before you start, write to us and we will reply.